Skip to content

Commit 18342d1

Browse files
Updates sec and obs docs
1 parent e5b0dbe commit 18342d1

File tree

3 files changed

+10
-4
lines changed

3 files changed

+10
-4
lines changed

explore-analyze/alerts-cases/cases/visualize-case-data.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ products:
1010

1111
Case data is stored in case analytics indices, which include data from case comments, attachments, and activity. You can query this information to build dashboards and metrics that improve your visibility into case patterns and trends.
1212

13-
## About case analytics indices
13+
## About case analytics indices [about-case-analytics-indices]
1414

1515
Case analytics indices and their aliases are automatically generated when Kibana starts up. Every five minutes, the indices are updated with new data from cases in your space. Historical data about cases is not stored; it gets overwritten whenever new case data is written to the indices.
1616

@@ -29,7 +29,7 @@ You can begin querying case analytics indices as soon as you have cases in your
2929
To query the case analytics indices, your role must have at least `Read` and `view_index_metadata` access to the indices.
3030
::::
3131

32-
Search and filter case data in [Discover](../../discover.md) and [Lens](../../visualize/lens.md), then build visualizations for [dashboards](../../dashboards.md). To help you start visualizing your case data, here are some sample {{esql}} queries that you can run from the [{{esql}} editor](../../../explore-analyze/query-filter/languages/esql-kibana.md#esql-kibana-get-started) in Discover.
32+
Search and filter case data in [Discover](../../discover.md) and [Lens](../../visualize/lens.md), and build visualizations for [dashboards](../../dashboards.md). To help you start visualizing your case data, here are some sample {{esql}} queries that you can run from the [{{esql}} editor](../../../explore-analyze/query-filter/languages/esql-kibana.md#esql-kibana-get-started) in Discover.
3333

3434
* Find the total number of cases that are currently open:
3535
```console

solutions/observability/incident-management/cases.md

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,4 +14,9 @@ Collect and share information about observability issues by creating a case. Cas
1414
:::{image} /solutions/images/observability-cases.png
1515
:alt: Cases page
1616
:screenshot:
17-
:::
17+
:::
18+
19+
::::{note}
20+
* From {{observability}} in the {{stack}}, you cannot access cases created in {{elastic-sec}} or Stack Management.
21+
* With the appropriate index access, you can [build visualizations](../../../explore-analyze/alerts-cases/cases/visualize-case-data.md) of {{observability}}, Stack Management, and {{elastic-sec}} case data to improve your visibility into case patterns and trends within your space.
22+
::::

solutions/security/investigate/cases.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,8 @@ You can also send cases to these external systems by [configuring external conne
3030
:::
3131

3232
::::{note}
33-
From {{elastic-sec}} in the {{stack}}, you cannot access cases created in {{observability}} or Stack Management.
33+
* From {{elastic-sec}} in the {{stack}}, you cannot access cases created in {{observability}} or Stack Management.
34+
* With the appropriate index access, you can [build visualizations](../../../explore-analyze/alerts-cases/cases/visualize-case-data.md) of {{observability}}, Stack Management, and {{elastic-sec}} case data to improve your visibility into case patterns and trends within your space.
3435
::::
3536

3637

0 commit comments

Comments
 (0)