Create entities from observables

Observables depend on entities to provide context. You can create these entities when working with observables:

• Indicators

• Sightings

To create an entity from observables:

In the Observables view

1. From the left sidebar, go to Search > GO SEARCH AND BROWSE > Browse > Observables.

2. Select the menu icon in the row corresponding to the observable you want to convert to a sighting.

3. From the drop-down menu select Create sighting or Create indicator.

   This creates a new entity, with the selected observables automatically added.

In the Observables detail pane

1. From the left sidebar, go to Search > GO SEARCH AND BROWSE > Browse > Observables.

2. Select anywhere in the row corresponding to the observable you want to convert to a sighting.

3. In the observable detail pane, select the menu icon .

4. From the drop-down menu select Create sighting or Create indicator

   This creates a new entity, with the selected observables automatically added.

In the Observables tab on the entity detail pane

1. Open the entity detail pane of the entity related to the observable you want to convert to a sighting.

2. In the entity detail pane, select the Observables tab.

3. In the Observables tab, select the menu icon .

4. From the drop-down menu select Create sighting or Create indicator

   This creates a new entity, with the selected observables automatically added.

Bulk action on multiple observables

You can also select multiple observables, and then you can convert them to sightings at once:

1. Browse to the Observables view or open the Observables tab in the entity detail pane of the entity whose observables you want to convert to sightings.

2. Select the checkboxes corresponding to the observables you want to convert to sightings.

3. Select the menu icon above the table header, and from the drop-down menu select Create sighting or Create indicator.

   This creates a new entity, with the selected observables automatically added.