--- title: Cases description: Track incidents, document findings, and coordinate response efforts with cases in Elastic Security, Observability, or Stack Management. url: https://www.elastic.co/elastic/docs-builder/docs/3028/explore-analyze/cases products: - Elastic Cloud Serverless - Elastic Observability - Elastic Security - Kibana applies_to: - Elastic Cloud Serverless: Generally available - Elastic Stack: Generally available --- # Cases Cases provide a central place to track incidents, document findings, and coordinate response efforts. Whether you're a security analyst triaging threats, a site reliability engineer responding to outages, or a platform engineer monitoring your Elastic Stack, cases bring together alerts, evidence, and team communication in one place. You can create cases in Elastic Security, Observability, or Stack Management depending on your workflow. Attach alerts and files, add comments and context, assign team members, and push updates to external systems like Jira or ServiceNow. ## Get started Start by [creating your first case](https://www.elastic.co/elastic/docs-builder/docs/3028/explore-analyze/cases/create-cases), then [configure case settings](https://www.elastic.co/elastic/docs-builder/docs/3028/explore-analyze/cases/configure-case-settings) to add external connectors, custom fields, and templates. Once you have cases, you can [attach alerts, files, and visualizations](https://www.elastic.co/elastic/docs-builder/docs/3028/explore-analyze/cases/attach-objects-to-cases) to document your investigation, [manage case details](https://www.elastic.co/elastic/docs-builder/docs/3028/explore-analyze/cases/manage-cases), and [share cases](https://www.elastic.co/elastic/docs-builder/docs/3028/explore-analyze/cases/search-share-cases) with external systems. If you're using Elastic Security, explore [Security case features](https://www.elastic.co/elastic/docs-builder/docs/3028/solutions/security/investigate/security-cases) for additional capabilities like adding events and Timelines to cases.