# Automaticaly close SIEM case **URL:** \ **Category:** SIEM\ **Created:** [May 8, 2022, 7:25pm UTC](https://discuss.elastic.co/t/automaticaly-close-siem-case/304195 "2022-05-08T19:25:25Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![lusynda](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lusynda/32/53557_2.png) [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Post date:** [May 8, 2022, 7:25pm UTC](https://discuss.elastic.co/t/automaticaly-close-siem-case/304195/1 "2022-05-08T19:25:25Z")
Hi all, I am tryiing to use shuffle soar to automate some of the task in the SIEM. One of them is the create and close cases. when i run the playbook the close case keep giving me error like this: ```auto These cases id has been updated. Please refresh before saving additional updates. ``` since before that i have call api to mark the case in progress so it seem that there is a conflic in the case action. Can anyone show me how to do the refresh case like the error. Thanks for your time ---
**Author:** ![lusynda](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lusynda/32/53557_2.png) [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Post date:** [May 9, 2022, 2:25am UTC](https://discuss.elastic.co/t/automaticaly-close-siem-case/304195/2 "2022-05-09T02:25:11Z")
After sometime trying to fix the playbook. I got it working now. It seems that after the first mark as progress api call the version of the case has been change, so i just put the new version of the case to the close case api call and it works now. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 6, 2022, 2:25am UTC](https://discuss.elastic.co/t/automaticaly-close-siem-case/304195/3 "2022-06-06T02:25:12Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.