Case analytics
Case analytics helps you report on your cases at scale. Behind the scenes, Elastic mirrors your case data into dedicated analytics indices and keeps them in sync as cases change, so your reports always reflect the latest activity.
Because that data lives in Elasticsearch indices, you can work with it using the tools you already know. Track case volume and trends, closure rates, mean time to respond (MTTR) and other timings, assignee workload, alert and observable breakdowns, and case field metrics with Discover, Lens, ES|QL, dashboards, and alerting.
To dive in, explore and visualize your case data or query it with ES|QL. The rest of this section covers where your data lives and the fields you can report on. To let users report on this data, grant access to the case analytics indices. To manage the feature, refer to Administer case analytics.
In earlier versions of the Elastic Stack, you need to turn on case analytics first. To do this, add xpack.cases.analytics.index.enabled: true to your kibana.yml file.
Case analytics works best when your deployment has 10 or fewer spaces with cases. In each of those spaces, a background task refreshes the analytics indices every five minutes, so with many spaces the combined work can put too much load on Task Manager. If you have more spaces, hold off on turning it on.