diff --git a/docs/en/observability/create-cases.asciidoc b/docs/en/observability/create-cases.asciidoc index c769a97f99..e0e677ddf2 100644 --- a/docs/en/observability/create-cases.asciidoc +++ b/docs/en/observability/create-cases.asciidoc @@ -1,9 +1,11 @@ [[create-cases]] = Cases -Cases are used to open and track observability issues directly in the Elastic {observability} app. -All cases list the original reporter and all the users who contribute to a case (participants). -You can also send cases to third party systems by <>. +Cases are used to open and track observability issues directly in the Elastic +{observability} app. You can add assignees and tags to your cases, set their +severity and status, and add alerts, comments, and visualizations. You can also +send cases to third party systems by +<>. [role="screenshot"] image::images/cases.png[Cases page] diff --git a/docs/en/observability/grant-cases-access.asciidoc b/docs/en/observability/grant-cases-access.asciidoc index 322e1c5f7c..2354f83029 100644 --- a/docs/en/observability/grant-cases-access.asciidoc +++ b/docs/en/observability/grant-cases-access.asciidoc @@ -19,6 +19,12 @@ a| NOTE: Roles without `All` *{connectors-feature}* feature privileges cannot create, add, delete, or modify case connectors. +| Give assignee access to cases +a| `All` for the *Cases* feature under *{observability}*. + +NOTE: Before a user can be assigned to a case, they must log into {kib} at +least once, which creates a user profile. + | Give view-only access for cases | `Read` for the *Cases* feature under *{observability}*. | Give access to view and delete cases | `Read` for the *Cases* feature under *{observability}* with the deletion sub-feature enabled. diff --git a/docs/en/observability/images/cases.png b/docs/en/observability/images/cases.png index 3074d45606..9b5a3b65c6 100644 Binary files a/docs/en/observability/images/cases.png and b/docs/en/observability/images/cases.png differ diff --git a/docs/en/observability/manage-cases.asciidoc b/docs/en/observability/manage-cases.asciidoc index 5dbb339bbc..48c428bf39 100644 --- a/docs/en/observability/manage-cases.asciidoc +++ b/docs/en/observability/manage-cases.asciidoc @@ -8,29 +8,35 @@ Open a new case to keep track of issues and share the details with colleagues. . Go to *Cases* -> *Create new case*. -. Give the case a name, add any identifying tags, and enter a description. +. Give the case a name, severity, and description. + TIP: In the `Description` area, you can use https://www.markdownguide.org/cheat-sheet[Markdown] syntax to create formatted text. +. Optionally, add assignees and tags. You can add users only if they meet the +necessary <>. + . Under External incident management system, select a <>. If -you’ve previously added one, that connector displays as the default selection. Otherwise, the +you've previously added one, that connector displays as the default selection. Otherwise, the default setting is `No connector selected`. -. After you’ve completed all of the required fields, click *Create case*. +. After you've completed all of the required fields, click *Create case*. [discrete] [[manage-case-observability]] == Manage existing cases -You can search existing cases and filter them by tags, reporter, and status: *open*, *in-progress*, or *closed*. +You can search existing cases and filter them by assignee, severity, status, and tags. To view a case, click on its name. You can then: * Add a new comment. * Edit existing comments and the description. +* Add or remove assignees. * Add a <> (if you did not select one while creating the case). * Send updates to external systems (if external connections are configured). +* Edit tags. +* Change the status. +* Change the severity. +* Refresh the case to retrieve the latest updates. * Close the case. * Reopen a closed case. -* Edit tags. -* Refresh the case to retrieve the latest updates. \ No newline at end of file