You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: explore-analyze/alerts-cases/cases/manage-cases-settings.md
+15-25Lines changed: 15 additions & 25 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -20,24 +20,22 @@ If you close cases in your external incident management system, they will remain
20
20
21
21
To change whether cases are automatically closed after they are sent to an external system, update the case closure options.
22
22
23
-
24
23
## External incident management systems [case-connectors]
25
24
26
25
You can add connectors to cases to push information to these external incident management systems:
27
26
28
-
* {ibm-r}
29
-
* {jira}
30
-
* {sn-itsm}
31
-
* {sn-sir}
32
-
* {swimlane}
33
-
* {hive}
34
-
* {webhook-cm}
27
+
* {{ibm-r}}
28
+
* {{jira}}
29
+
* {{sn-itsm}}
30
+
* {{sn-sir}}
31
+
* {{swimlane}}
32
+
* {{hive}}
33
+
* {{webhook-cm}}
35
34
36
35
::::{note}
37
36
To create connectors and send cases to external systems, you must have the appropriate {{kib}} feature privileges. Refer to [Configure access to cases](setup-cases.md).
38
37
::::
39
38
40
-
41
39
You can create connectors in **{{stack-manage-app}} > {{connectors-ui}}**, as described in [*Connectors*](../../../deploy-manage/manage-connectors.md). Alternatively, you can create them in **{{stack-manage-app}} > Cases > Settings**:
42
40
43
41
1. From the **Incident management system** list, select **Add new connector**.
@@ -48,44 +46,39 @@ You can subsequently choose the connector when you create cases and use it in ca
48
46
49
47
To update a connector, click **Update <connectorname>** and edit the connector fields as required.
50
48
51
-
52
49
## Custom fields [case-custom-fields]
53
50
54
51
You can add optional and required fields for customized case collaboration. [8.15.0]
55
52
56
53
To create a custom field:
57
54
58
55
1. In the **Custom fields** section, click **Add field**.
2. You must provide a field label and type (text or toggle). You can optionally designate it as a required field and provide a default value.
66
62
67
63
When you create a custom field, it’s added to all new and existing cases. Existing cases have null values for new text fields until you set them in each case.
68
64
69
65
You can subsequently remove or edit custom fields on the **Settings** page.
70
66
71
-
72
67
## Templates [case-templates]
73
68
74
69
::::{warning}
75
70
This functionality is in technical preview and may be changed or removed in a future release. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features.
76
71
::::
77
72
78
-
79
73
You can make the case creation process faster and more consistent by adding templates. A template defines values for one or all of the case fields (such as severity, tags, description, and title) as well as any custom fields.
80
74
81
75
To create a template:
82
76
83
77
1. In the **Templates** section, click **Add template**.
2. You must provide a template name and case severity. You can optionally add template tags and a description, values for each case field, and a case connector.
91
84
@@ -94,6 +87,3 @@ When users create cases, they can optionally select a template and use its value
94
87
::::{note}
95
88
If you update or delete templates, existing cases are unaffected.
2. If you defined [templates](manage-cases-settings.md#case-templates), you can optionally select one to use its default field values. [preview]
22
21
3. Give the case a name, severity, and description.
23
-
24
-
::::{tip}
25
-
In the `Description` area, you can use [Markdown](https://www.markdownguide.org/cheat-sheet) syntax to create formatted text.
26
-
::::
22
+
::::{tip}
23
+
In the `Description` area, you can use [Markdown](https://www.markdownguide.org/cheat-sheet) syntax to create formatted text.
24
+
::::
27
25
28
26
4. Optionally, add a category, assignees, and tags. You can add users only if they meet the necessary [prerequisites](setup-cases.md).
29
27
5. If you defined any [custom fields](manage-cases-settings.md#case-custom-fields), they appear in the **Additional fields** section. [8.15.0]
@@ -32,7 +30,6 @@ Open a new case to keep track of issues and share their details with colleagues.
32
30
33
31
[preview] Alternatively, you can configure your rules to automatically create cases by using [case actions](https://www.elastic.co/guide/en/kibana/current/cases-action-type.html). By default, the rule adds all of the alerts within a specified time window to a single case. You can optionally choose a field to group the alerts and create separate cases for each group. You can also choose whether you want the rule to reopen cases or open new ones when the time window elapses.
You can configure email notifications that occur when users are assigned to cases.
@@ -43,38 +40,35 @@ For hosted {{kib}} on {{ess}}:
43
40
44
41
You do not need to take any more steps to configure an email connector or update {{kib}} user settings, since the preconfigured Elastic-Cloud-SMTP connector is used by default.
45
42
46
-
47
43
For self-managed {{kib}}:
48
44
49
45
1. Create a preconfigured email connector.
50
-
51
-
::::{note}
52
-
At this time, email notifications support only preconfigured connectors, which are defined in the `kibana.yml` file. For examples, refer to [Email connectors](https://www.elastic.co/guide/en/kibana/current/pre-configured-connectors.html#preconfigured-email-configuration) and [Configure email accounts for well-known services](https://www.elastic.co/guide/en/kibana/current/email-action-type.html#configuring-email).
53
-
::::
46
+
::::{note}
47
+
At this time, email notifications support only preconfigured connectors, which are defined in the `kibana.yml` file. For examples, refer to [Email connectors](https://www.elastic.co/guide/en/kibana/current/pre-configured-connectors.html#preconfigured-email-configuration) and [Configure email accounts for well-known services](https://www.elastic.co/guide/en/kibana/current/email-action-type.html#configuring-email).
48
+
::::
54
49
55
50
2. Set the `notifications.connectors.default.email` {{kib}} setting in kibana.yml to the name of your email connector.
1. If you want the email notifications to contain links back to the case, you must configure the [server.publicBaseUrl](../../../deploy-manage/deploy/self-managed/configure.md#server-publicBaseUrl) setting.
3. If you want the email notifications to contain links back to the case, you must configure the [server.publicBaseUrl](../../../deploy-manage/deploy/self-managed/configure.md#server-publicBaseUrl) setting.
74
69
75
70
When you subsequently add assignees to cases, they receive an email.
76
71
77
-
78
72
## Add files [add-case-files]
79
73
80
74
After you create a case, you can upload and manage files on the **Files** tab:
@@ -95,8 +89,6 @@ Uploaded files are also accessible in **{{stack-manage-app}} > Files**. When you
95
89
96
90
::::
97
91
98
-
99
-
100
92
## Add visualizations [add-case-visualization]
101
93
102
94
You can also optionally add visualizations. For example, you can portray event and alert data through charts and graphs.
@@ -110,10 +102,9 @@ To add a visualization to a comment within your case:
110
102
111
103
1. Click the **Visualization** button. The **Add visualization** dialog appears.
112
104
2. Select an existing visualization from your Visualize Library or create a new visualization.
113
-
114
-
::::{important}
115
-
Set an absolute time range for your visualization. This ensures your visualization doesn’t change over time after you save it to your case and provides important context for viewers.
116
-
::::
105
+
::::{important}
106
+
Set an absolute time range for your visualization. This ensures your visualization doesn’t change over time after you save it to your case and provides important context for viewers.
107
+
::::
117
108
118
109
3. After you’ve finished creating your visualization, click **Save and return** to go back to your case.
119
110
4. Click **Preview** to see how the visualization will appear in the case comment.
@@ -123,7 +114,6 @@ Alternatively, while viewing a [dashboard](../../dashboards.md) you can open a p
123
114
124
115
After a visualization has been added to a case, you can modify or interact with it by clicking the **Open Visualization** option in the case’s comment menu.
125
116
126
-
127
117
## Manage cases [manage-case]
128
118
129
119
In **Management > {{stack-manage-app}} > Cases**, you can search cases and filter them by attributes such as assignees, categories, severity, status, and tags. You can also select multiple cases and use bulk actions to delete cases or change their attributes.
@@ -141,5 +131,3 @@ To view a case, click on its name. You can then:
Copy file name to clipboardExpand all lines: explore-analyze/alerts-cases/cases/setup-cases.md
-8Lines changed: 0 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,7 +7,6 @@ mapped_pages:
7
7
8
8
To access cases in **{{stack-manage-app}}**, you must have the appropriate {{kib}} privileges:
9
9
10
-
11
10
## Give full access to manage cases and settings [_give_full_access_to_manage_cases_and_settings]
12
11
13
12
**{{kib}} privileges**
@@ -22,8 +21,6 @@ By default, `All` for the **Cases** feature includes authority to delete cases a
22
21
23
22
::::
24
23
25
-
26
-
27
24
## Give assignee access to cases [_give_assignee_access_to_cases]
28
25
29
26
**{{kib}} privileges**
@@ -37,8 +34,6 @@ This privilege is also required to add [case actions](https://www.elastic.co/gui
37
34
38
35
::::
39
36
40
-
41
-
42
37
## Give view-only access to cases [_give_view_only_access_to_cases]
43
38
44
39
**{{kib}} privileges**
@@ -49,15 +44,12 @@ This privilege is also required to add [case actions](https://www.elastic.co/gui
49
44
You can customize sub-feature privileges for deleting cases and comments, editing case settings, adding case comments and attachments, and re-opening cases.
50
45
::::
51
46
52
-
53
-
54
47
## Revoke all access to cases [_revoke_all_access_to_cases]
55
48
56
49
**{{kib}} privileges**
57
50
58
51
`None` for the **Cases** feature under **Management**.
59
52
60
-
61
53
## More details [_more_details_2]
62
54
63
55
For more details, refer to [{{kib}} privileges](../../../deploy-manage/users-roles/cluster-or-deployment-auth/kibana-privileges.md).
0 commit comments