[Request] [Cases] Add incremental id to cases

[janmonschke]

Description

We are introducing a new property in cases, called incremental id. Think of it as an easy-to-read identifier for cases. Referencing cases by their uuid in conversations is complicated, so we're adding a more readable id. Similar to the ids you see on Github issues.

This incremental id is assigned in the background at a given interval (default: 10 minutes, see config below) and will not be immediately available after case creation. It cannot be set by the user. When a case is exported, the id will be removed. Users can find cases by their incremental id from the search field in the cases list by searching for #123.

This functionality is being added for cases in all solutions (Security, Observability, and Stack).

TBD: We're waiting for a go/no-go for 8.19/9.1. This ticket is written as if there was a GO.

Screenshots

(Note: Design pending)

The new ID in the cases table

The new ID in the case details page

Searching for cases by their incremental ID

Background & resources

• PRs: [Cases] Add incremental id service and expose the ID in the UI kibana#222874
• Issues/metas: [Cases] - Cases Incremental Numeric Identifier kibana#212570
• Point of contact: @janmonschke
• Test environments: (TBD)

Which documentation set does this change impact?

ESS and serverless

ESS release

The functionality will be introduced in ESS in 9.2

Serverless release

Unknown

Feature differences

The feature is identical in ESS and serverless

API docs impact

(TBD)

Prerequisites, privileges, feature flags

No response

[nastasha-solomon]

Moving the status to Waiting on dev/product because the go/no go decision for 8.19/9.1 is being made this week.

[nastasha-solomon]

@janmonschke when you have a moment, can you share more info on the following items that you demoed yesterday:

• New advanced setting section (Cases) and advanced setting that enables/disables the case ID UI.
• How frequently the incremental ID job runs and what this means for auto-assigning IDs to new cases.
• Feature flag config in kibana.yml file, but only if the decision is to enable the feature flag (FF) by default and the PR that enables the feature isn't included in the latest 8.19/9.1 BC (BC2?).

[janmonschke]

@nastasha-solomon I updated the description but not the screenshots yet. Let me know if you have some good copy for case titles and descriptions :)

[nastasha-solomon]

Confirmed with @michaelolo24 that this won't go into 8.19/9.1. I'll remove this from the meta doc issues for Kibana and Security.

[nastasha-solomon]

Removing this from the sprint since it no longer needs immediate attention.