In SAS Visual Investigator, a disposition pop-up error and a duplicate case might occur after you disposition an alert using Create case.

The problem occurs when the alert lock duration expires while the disposition process is in progress.

By default, a lock remains in effect for 90 minutes. If you disposition an alert after the lock duration period, the alert is automatically checked in, and the error occurs.

Workaround

To circumvent this issue, do any of the following:

• Process the alert within the alert time-out period.
• Refresh the page and check out the alert again when the alert time-out period is exceeded.
• Set the relationship for the Case to Alert setting from One to Many to ensure that only one case is created for an alert.