Cases for Elastic Observability
Collect and share information about observability issues by creating a case. Cases allow you to track key investigation details, add assignees and tags to your cases, set their severity and status, and add alerts, comments, and visualizations. You can also send cases to third-party systems by configuring external connectors.
Stack Cases are automatically assigned human-readable numeric IDs, which you can use for easier referencing. Each time you create a new case in your space, the case ID increments by one. IDs are assigned to cases by a background task that runs every 10 minutes, which can cause a delay in ID assignment, especially in spaces with many cases. You can find the case ID after the case's name and can use it while searching the Cases table.
After creating cases, use case data to build dashboards and visualizations that provide insights into case trends and operational metrics. Refer to Use cases as data to learn more.
- If you create cases in Observability, they are not visible from the Elastic Security app or Stack Management. Likewise, the cases you create in Stack Management are not visible in the Observability or Elastic Security.
- You cannot attach alerts from Elastic Security or Stack Management to cases in Observability.