Link or unlink issues from a case - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

From the Issues page, select one or more issues that you want to link, right-click and select Manage Issue+Link to case. You can select one or more case to link the issues.

From the Issues page, select the issue that you want to unlink, right-click and select Manage Issue+Unlink from case. You can select one or more cases to unlink the issue. You cannot bulk select issues to unlink.