This document explains how administrators can configure case names in Google Security Operations.
As an administrator, you can control how Google Security Operations names
cases. On the Settings > Case Data > Case Name page, there are five
fields. Google SecOps tries to match each case with the name in
the first field. If there's no match, it moves on to the next field until it
finds one.
To add a case name, follow these steps:
Go to Settings > Case Data > Case Name.
Place your cursor inside the square brackets of the field.
Either manually enter fixed text, or click the brackets next to the field to open the Insert Placeholder dialog.
In the Insert Placeholder dialog, select a placeholder from the Alert,
Case, Event, or Dynamic Environment Parameters menu.
Once selected, the placeholder is automatically inserted into the field.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eGoogle SecOps admins can define the criteria for automatically naming cases.\u003c/p\u003e\n"],["\u003cp\u003eThe system uses a prioritized list of five fields to determine a case name, proceeding to the next field if the current one doesn't yield a match.\u003c/p\u003e\n"],["\u003cp\u003eCase names can be either fixed text or selected from placeholders found in the Alert, Case, Event, or Dynamic Environment Parameters menus.\u003c/p\u003e\n"],["\u003cp\u003eTo set a case name, navigate to \u003cstrong\u003eSettings > Case Data > Case Name\u003c/strong\u003e and choose your method to add information.\u003c/p\u003e\n"]]],[],null,["# Add a case name\n===============\n\nSupported in: \nGoogle secops [SOAR](/chronicle/docs/secops/google-secops-soar-toc) \nThis document explains how administrators can configure case names in Google Security Operations.\nAs an administrator, you can control how Google Security Operations names\ncases. On the **Settings \\\u003e Case Data \\\u003e Case Name** page, there are five\nfields. Google SecOps tries to match each case with the name in\nthe first field. If there's no match, it moves on to the next field until it\nfinds one.\n\nTo add a case name, follow these steps:\n\n1. Go to **Settings \\\u003e Case Data \\\u003e Case Name**.\n2. Place your cursor inside the square brackets of the field.\n3. Either manually enter fixed text, or click the brackets next to the field to open the **Insert Placeholder** dialog.\n4. In the **Insert Placeholder** dialog, select a placeholder from the **Alert** , **Case** , **Event** , or **Dynamic Environment Parameters** menu. Once selected, the placeholder is automatically inserted into the field.\n\n**Need more help?** [Get answers from Community members and Google SecOps professionals.](https://security.googlecloudcommunity.com/google-security-operations-2)"]]