What are records?

In Tines, records are structured data entries that capture and store information from your workflows. Each record represents a single event or data point, allowing you to accomplish things like:

  • Structure event data across story runs.

  • Store and report on data produced by Tines.

  • Visualize data through charts and dashboards.

  • Enable storage of raw logs or extensive data dumps directly within the records table.

Think of records as your team's digital filing cabinet. Each record is a “file” containing specific details about an event, making it easy to retrieve, analyze, and act upon later. For example, a security alert record might include an alert ID, timestamp, source IP, risk score, and affected user as structured fields that make the data searchable and actionable.

How records relate to cases 

While cases provide a collaborative environment for managing and responding to incidents, records offer a way to capture detailed data from your workflows. Together, they give you both the workspace and the information you need to act.

Here's how they work together:

  • Attach records to cases: You can add records as artifacts to cases, providing additional context and data for investigation and remediation.

  • Link cases via records: Establish a clear relationship between incidents and the data that triggered them. When a record is attached to a case, your team can see exactly what data prompted the investigation and track how it was resolved.

  • Turn data into action: Create new cases directly from existing records. If you're reviewing historical security alerts and spot a pattern that needs investigation, you can create a case from that record with a single click, bringing all the context forward automatically.

This integration allows your team to have a comprehensive view of both the incident (case) and the underlying data (record), facilitating more informed decision-making and faster responses.

Integrate records into your cases 

To effectively integrate records into your case management:

  1. Define record types: A record type is a predefined structure that defines the fields and data types for a specific kind of data. By defining record types, you ensure consistency and clarity in your data.

  2. Utilize parent-child relationships: Records support parent-child relationships, allowing you to create dependencies between records. When a parent record is added to a case, all associated child records are also added, providing a comprehensive view of related data.

  3. Visualize and analyze data: Use the records table to view and manage your records. You can sort, filter, and export data, as well as create charts and dashboards to visualize trends and insights.

Was this lesson helpful?

Built by you,
powered by Tines

Already have an account? Log in.