Merge a case - You can merge cases from the Table view of the Cases page. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Rule Based Score: Recalculates the case score to include the merged case scores.

Manual Score: Enter a score and override the rule-based score.

If both cases have been assigned, the merged case takes the target case assignee.

If both cases are unassigned, the merged case remains unassigned.

If the target case is assigned and the source case is unassigned, the merged case takes the target assignee.

If the target case is unassigned and the source case is assigned, the merged case takes the existing assignee.

In the merged case, all source context data is lost even if the target case does or doesn't contain context data. If the target case contains context data, that context data is preserved in the merged case.