---
title: "Linked rows"
icon: "lock"
---

Linked rows use regular tables.
When you create a table for case-linked evidence, use the same `columns` JSON schema documented in [Tables](/automations/tables) and [Table actions](/automations/core-actions/memory-actions/tables).

{/* Auto-generated by scripts/generate_core_action_docs.py; do not edit by hand. */}

## `core.cases.link_row`

Link an existing table row to a case.

### Inputs

<ParamField path="case_id" type="string" required>

Case ID

</ParamField>

<ParamField path="row_id" type="string" required>

Row ID

</ParamField>

<ParamField path="table_id" type="string" required>

Table ID

</ParamField>

### Examples

**Link table rows to a case**

```yaml
- ref: link_row
  action: core.cases.link_row
  args:
    case_id: ${{ TRIGGER.case_id }}
    table_id: indicators
    row_id: ${{ TRIGGER.row_id }}
- ref: unlink_row
  action: core.cases.unlink_row
  args:
    case_id: ${{ TRIGGER.case_id }}
    table_id: indicators
    row_id: ${{ TRIGGER.row_id }}
- ref: insert_case_row
  action: core.cases.insert_row
  args:
    case_id: ${{ TRIGGER.case_id }}
    table_id: indicators
    row:
      value: ${{ TRIGGER.indicator }}
      indicator_type: domain
```

## `core.cases.unlink_row`

Remove a linked table row from a case.

### Inputs

<ParamField path="case_id" type="string" required>

Case ID

</ParamField>

<ParamField path="row_id" type="string" required>

Row ID

</ParamField>

<ParamField path="table_id" type="string" required>

Table ID

</ParamField>

### Examples

**Link table rows to a case**

```yaml
- ref: link_row
  action: core.cases.link_row
  args:
    case_id: ${{ TRIGGER.case_id }}
    table_id: indicators
    row_id: ${{ TRIGGER.row_id }}
- ref: unlink_row
  action: core.cases.unlink_row
  args:
    case_id: ${{ TRIGGER.case_id }}
    table_id: indicators
    row_id: ${{ TRIGGER.row_id }}
- ref: insert_case_row
  action: core.cases.insert_row
  args:
    case_id: ${{ TRIGGER.case_id }}
    table_id: indicators
    row:
      value: ${{ TRIGGER.indicator }}
      indicator_type: domain
```

## `core.cases.insert_row`

Insert a row into a table and link it to a case.

### Inputs

<ParamField path="case_id" type="string" required>

Case ID

</ParamField>

<ParamField path="row" type="object" required>

Row values

</ParamField>

<ParamField path="table_id" type="string" required>

Table ID

</ParamField>

### Examples

**Link table rows to a case**

```yaml
- ref: link_row
  action: core.cases.link_row
  args:
    case_id: ${{ TRIGGER.case_id }}
    table_id: indicators
    row_id: ${{ TRIGGER.row_id }}
- ref: unlink_row
  action: core.cases.unlink_row
  args:
    case_id: ${{ TRIGGER.case_id }}
    table_id: indicators
    row_id: ${{ TRIGGER.row_id }}
- ref: insert_case_row
  action: core.cases.insert_row
  args:
    case_id: ${{ TRIGGER.case_id }}
    table_id: indicators
    row:
      value: ${{ TRIGGER.indicator }}
      indicator_type: domain
```
