Cases for Elastic Observability

Collect and share information about observability issues by creating a case. Cases allow you to track key investigation details, add assignees and tags to your cases, set their severity and status, and add alerts, comments, and visualizations. You can also send cases to third-party systems by configuring external connectors.

Cases are automatically assigned human-readable numeric IDs, which you can use for easier referencing. Each time you create a new case in your space, the case ID increments by one. IDs are assigned to cases by a background task that runs every 10 minutes, which can cause a delay in ID assignment, especially in spaces with many cases. You can find the case ID after the case's name and can use it while searching the Cases table.

×

• If you create cases in Observability, they are not visible from the Elastic Security app or Stack Management. Likewise, the cases you create in Stack Management are not visible in the Observability or Elastic Security.
• You cannot attach alerts from Elastic Security or Stack Management to cases in Observability.