Cases and case settings

Author: nastasha-solomon

raw-migrated-files/docs-content/serverless/security-cases-overview.md

@@ -237,8 +237,6 @@ toc:
       - file: docs-content/serverless/security-benchmark-rules.md
       - file: docs-content/serverless/security-blocklist.md
       - file: docs-content/serverless/security-building-block-rules.md
-      - file: docs-content/serverless/security-cases-overview.md
-      - file: docs-content/serverless/security-cases-settings.md
       - file: docs-content/serverless/security-cloud-native-security-overview.md
       - file: docs-content/serverless/security-cloud-posture-dashboard-dash-cspm.md
       - file: docs-content/serverless/security-cloud-posture-dashboard-dash-kspm.md

raw-migrated-files/docs-content/serverless/security-cases-settings.md

@@ -4,14 +4,7 @@ mapped_urls:
   - https://www.elastic.co/guide/en/serverless/current/security-cases-overview.html
 ---
 
-# Cases
-
-% What needs to be done: Align serverless/stateful
-
-% Use migrated content from existing pages that map to this page:
-
-% - [x] ./raw-migrated-files/security-docs/security/cases-overview.md
-% - [ ] ./raw-migrated-files/docs-content/serverless/security-cases-overview.md
+# Cases [security-cases-overview]
 
 Collect and share information about security issues by opening a case in {{elastic-sec}}. Cases allow you to track key investigation details, collect alerts in a central location, and more. The {{elastic-sec}} UI provides several ways to create and manage cases. Alternatively, you can use the [cases API](https://www.elastic.co/docs/api/doc/kibana/group/endpoint-cases) to perform the same tasks.
 
@@ -30,7 +23,7 @@ You can also send cases to these external systems by [configuring external conne
 :::
 
 ::::{note}
-From {{elastic-sec}}, you cannot access cases created in {{observability}} or Stack Management.
+From {{elastic-sec}} in the {{stack}}, you cannot access cases created in {{observability}} or Stack Management.
 ::::
 
 

raw-migrated-files/toc.yml

@@ -4,42 +4,17 @@ mapped_urls:
   - https://www.elastic.co/guide/en/serverless/current/security-cases-settings.html
 ---
 
-# Configure case settings
+# Configure case settings [security-cases-settings]
 
-% What needs to be done: Align serverless/stateful
-
-% Use migrated content from existing pages that map to this page:
-
-% - [x] ./raw-migrated-files/security-docs/security/cases-manage-settings.md
-% - [ ] ./raw-migrated-files/docs-content/serverless/security-cases-settings.md
-
-% Internal links rely on the following IDs being on this page (e.g. as a heading ID, paragraph ID, etc):
-
-$$$cases-templates$$$
-
-$$$cases-ui-custom-fields$$$
-
-$$$cases-ui-integrations$$$
-
-$$$cases-observable-types$$$
-
-$$$security-cases-settings-templates$$$
-
-$$$security-cases-settings-custom-fields$$$
-
-$$$security-cases-observable-types$$$
-
-
-
-To change case closure options, add custom fields, templates, and connectors for external incident management systems, and create custom observable types, find **Cases** in the navigation menu or search for `Security/Cases` by using the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md), then click **Settings**.
+To change case closure options, add custom fields, templates, and connectors for external incident management systems, and create custom observable types. In the {{stack}}, find **Cases** in the navigation menu or search for `Security/Cases` by using the [global search field](/explore-analyze/find-and-organize/find-apps-and-objects.md), then click **Settings**. In {{serverless-short}}, you can access case settings in an {{elastic-sec}} project, go to **Cases** → **Settings**.
 
 :::{image} ../../../images/security-cases-settings.png
 :alt: Shows the case settings page
 :class: screenshot
 :::
 
 ::::{note}
-To view and change case settings, you must have the appropriate {{kib}} feature privileges. Refer to [Cases requirements](/solutions/security/investigate/cases-requirements.md).
+On {{stack}}, view and change case settings, you must have the appropriate {{kib}} feature privileges. Refer to [Cases requirements](/solutions/security/investigate/cases-requirements.md).
 ::::
 
 
@@ -48,7 +23,7 @@ To view and change case settings, you must have the appropriate {{kib}} feature
 
 If you close cases in your external incident management system, the cases will remain open in {{elastic-sec}} until you close them manually.
 
-To close cases when they are sent to an external system, select **Automatically close cases when pushing new incident to external system**.
+To close cases when they are sent to an external system, select the option to automatically close cases when pushing new incident to external system.
 
 
 ## External incident management systems [cases-ui-integrations]
@@ -66,7 +41,7 @@ You can push {{elastic-sec}} cases to these third-party systems:
 To push cases, you need to create a connector, which stores the information required to interact with an external system. After you have created a connector, you can set {{elastic-sec}} cases to automatically close when they are sent to external systems.
 
 ::::{important}
-To create connectors and send cases to external systems, you need the [appropriate license](https://www.elastic.co/subscriptions), and your role needs **All** privileges for the **Action and Connectors** feature. For more information, refer to [Cases requirements](/solutions/security/investigate/cases-requirements.md).
+To create connectors and send cases to external systems, ensure you have the appropriate role privileges and [{{stack}} subscription](https://www.elastic.co/pricing) or [{{serverless-short}} project tier](../../../deploy-manage/deploy/elastic-cloud/project-settings.md). For more information, refer to [Cases requirements](/solutions/security/investigate/cases-requirements.md).
 ::::
 
 
@@ -154,7 +129,7 @@ If you update or delete templates, existing cases are unaffected.
 ## Observable types [cases-observable-types]
 
 ::::{admonition} Requirements
-To use observables, you must have a [Platinum subscription](https://www.elastic.co/pricing) or higher.
+Ensure you have the appropriate [{{stack}} subscription](https://www.elastic.co/pricing) or [{{serverless-short}} project tier](../../../deploy-manage/deploy/elastic-cloud/project-settings.md).
 
 ::::