Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[meta][Security Solution][ResponseOps][Cases] Case connector known enhancements list #94115

Closed
12 tasks
jonathan-buttner opened this issue Mar 9, 2021 · 4 comments
Closed
12 tasks
Labels
enhancement New value added to drive a business result Feature:Cases Cases feature Team:ResponseOps Label for the ResponseOps team (formerly the Cases and Alerting teams)

Comments

@jonathan-buttner
Copy link
Contributor

jonathan-buttner commented Mar 9, 2021

This issues details the final enhancements to complete the user experience for case connector.

  • Refactor _find API to fix the total field when ignoring Collections. Need to add collectionState field that holds a value indicating whether the collection is empty and it needs to be set when a sub cases is created or deleted
  • Get sub case API should return a CaseResponse it should handle retrieving both the parent information and the sub case information
  • Allow changing status of a sub case in the UI
  • Allow deletion of a sub case through the UI
  • Profile and optimize the _find cases route
  • Investigate if we can remove update_at to avoid a saved object document version change each time a generated alert is attached to a sub case (the collection version changes)
  • Try to optimize the case push functionality, for example the SIR we have to retrieve all the alerts for a case and send them to the external SIR service which takes a long time
  • Once the case connector feature is completed remove all references to ENABLE_SUB_CASES flag reenable the skipped tests
  • Add RBAC to each sub cases route
  • Check for subCase?.attributes.owner within commentable_case
  • Correctly handle the owner field in sub cases
  • Import default max signals from here: https://github.com/elastic/kibana/pull/98999/files#diff-f0a25812770884a773aed459d250197118850e53c44cd06ff7240ccffe156d1cR21 (kbn-securitysolution-io-ts-utils)
@jonathan-buttner jonathan-buttner added Team:Threat Hunting Security Solution Threat Hunting Team Feature:Cases Cases feature labels Mar 9, 2021
@elasticmachine
Copy link
Contributor

Pinging @elastic/security-threat-hunting (Team:Threat Hunting)

@elasticmachine
Copy link
Contributor

Pinging @elastic/security-threat-hunting-cases (Team:Threat Hunting:Cases)

@cnasikas cnasikas added Team:ResponseOps Label for the ResponseOps team (formerly the Cases and Alerting teams) and removed Team:Threat Hunting Security Solution Threat Hunting Team Team:Threat Hunting:Cases labels Jan 10, 2022
@elasticmachine
Copy link
Contributor

Pinging @elastic/response-ops (Team:ResponseOps)

@kobelb kobelb added the needs-team Issues missing a team label label Jan 31, 2022
@botelastic botelastic bot removed the needs-team Issues missing a team label label Jan 31, 2022
@EricDavisX EricDavisX changed the title [Security Solution][Case] Case connector [meta][Security Solution][ResponseOps][Cases] Case connector known enhancements list Feb 1, 2022
@cnasikas
Copy link
Member

cnasikas commented Jun 7, 2022

Closing this as the case connector is totally removed from the codebase.

@cnasikas cnasikas closed this as completed Jun 7, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New value added to drive a business result Feature:Cases Cases feature Team:ResponseOps Label for the ResponseOps team (formerly the Cases and Alerting teams)
Projects
None yet
Development

No branches or pull requests

5 participants