ESM provides two ways to view the events attached to a case:
Right-click a case on the resource tree and select Case Details Channel.
Create an active channel by following the instructions in Creating or Editing an Active Channel, and use the filter condition, InCase, to identify the case to be evaluated.
Both channel types are static. This means the channel evaluates the case once, and then displays the events found in the case at that time. In an active channel using the filter with an InCase condition, the filter evaluates for a True or False condition. If events are already attached to the case at that time of evaluation (the condition evaluates to True), these events are displayed on the channel, after which further evaluation stops. Even if the active channel using the InCase filter condition is set with the Continuously Evaluate option, new events added to the case itself after the initial evaluation are not displayed.
To update (refresh) the Case Details Channel or the active channel that uses the InCase filter:
Close, then re-open the channel.