diff --git a/docs/en/observability/images/cases-settings.png b/docs/en/observability/images/cases-settings.png index 00b6286d56..41b3ef64ef 100644 Binary files a/docs/en/observability/images/cases-settings.png and b/docs/en/observability/images/cases-settings.png differ diff --git a/docs/en/observability/index.asciidoc b/docs/en/observability/index.asciidoc index 53bc84c58b..83247dea79 100644 --- a/docs/en/observability/index.asciidoc +++ b/docs/en/observability/index.asciidoc @@ -190,7 +190,7 @@ include::grant-cases-access.asciidoc[leveloffset=+2] include::manage-cases.asciidoc[leveloffset=+2] -include::create-observability-connectors.asciidoc[leveloffset=+2] +include::manage-cases-settings.asciidoc[leveloffset=+2] include::ci-cd-observability.asciidoc[leveloffset=+1] diff --git a/docs/en/observability/create-observability-connectors.asciidoc b/docs/en/observability/manage-cases-settings.asciidoc similarity index 65% rename from docs/en/observability/create-observability-connectors.asciidoc rename to docs/en/observability/manage-cases-settings.asciidoc index 6fafdadd1a..3c6e0b1374 100644 --- a/docs/en/observability/create-observability-connectors.asciidoc +++ b/docs/en/observability/manage-cases-settings.asciidoc @@ -1,5 +1,23 @@ +[[manage-cases-settings]] += Configure case settings + +To change case closure options and add custom fields, templates, and connectors for external incident management systems, go to *Cases* -> *Settings*. + +[role="screenshot"] +image::images/cases-settings.png[View case settings] +// NOTE: This is an autogenerated screenshot. Do not edit it directly. + +[discrete] +[[close-connector-observability]] +== Case closures + +If you close cases in your external incident management system, the cases will remain open in Elastic Observability until you close them manually. + +To close cases when they are sent to an external system, select *Automatically close cases when pushing new incident to external system*. + +[discrete] [[cases-external-connectors]] -= Configure external connectors +== External incident management systems If you are using an external incident management system, you can integrate Elastic Observability cases with that system using _connectors_. These third-party systems are supported: @@ -18,19 +36,12 @@ You need to create a connector to send cases, which stores the information requi with an external system. After creating a connector, you can set your cases to -automatically close when they are sent to an external system. +<> when they are sent to an external system. [discrete] [[new-connector-observability]] -== Create a connector +=== Create a connector -. Go to *Cases* -> *Settings*. -+ --- -[role="screenshot"] -image::images/cases-settings.png[View case settings] -// NOTE: This is an autogenerated screenshot. Do not edit it directly. --- . From the *Incident management system* list, select *Add new connector*. . Select the system to send cases to: *{sn}*, *{jira}*, *{ibm-r}*, *{swimlane}*, or *{webhook-cm}*. @@ -47,7 +58,7 @@ or *{webhook-cm}*. [discrete] [[Edit-connector-observability]] -== Edit a connector +=== Edit a connector You can create additional connectors, update existing connectors, and change the connector used to send cases to external systems. @@ -55,7 +66,6 @@ TIP: You can also configure which connector is used for each case individually. To change the default connector used to send cases to external systems: -. Go to *Cases* -> *Settings*. . Select the required connector from the *Incident management system* list. To update an existing connector: @@ -64,14 +74,21 @@ To update an existing connector: . Update the connector fields as required. [discrete] -[[close-connector-observability]] -== Sending and closing cases +[[observability-case-templates]] +== Templates + +preview::[] + +You can make the case creation process faster and more consistent by adding templates. +A template defines values for one or all of the case fields (such as severity, tags, description, and title) as well as any <>. + +To create a template: + +. In the *Templates* section, click *Add template*. -To send a case to an external system, click the **Push as incident** button from the individual case page. -This information is not sent automatically. If you make further changes to the shared case fields, you should push the case again. +. You must provide a template name and case severity. + You can optionally add template tags and a description, values for each case field, and a case connector. -If you close cases in your external incident management system, the cases will remain open in Elastic Observability until you close them -manually. +When users create cases, they can optionally select a template and use its field values or override them. -To close cases when they are sent to an external system, select -*Automatically close cases when pushing new incident to external system* when adding a connector to a case. \ No newline at end of file +NOTE: If you update or delete templates, existing cases are unaffected. \ No newline at end of file diff --git a/docs/en/observability/manage-cases.asciidoc b/docs/en/observability/manage-cases.asciidoc index 71743f09e1..8d75e8a337 100644 --- a/docs/en/observability/manage-cases.asciidoc +++ b/docs/en/observability/manage-cases.asciidoc @@ -121,6 +121,16 @@ Uploaded files are also accessible in *{stack-manage-app} > Files*. When you export cases as {kibana-ref}/managing-saved-objects.html[saved objects], the case files are not exported. ============================================================================ +[discrete] +[[push-observability-case]] +== Send cases to external incident management systems + +To send a case to an external system, click the button in the *External incident management system* section of the individual case page. +This information is not sent automatically. +If you make further changes to the shared case fields, you should push the case again. + +For more information about configuring connections to external incident management systems, refer to <>. + [discrete] [[manage-case-observability]] == Manage existing cases @@ -143,15 +153,3 @@ To view a case, click on its name. You can then: * Refresh the case to retrieve the latest updates. * Close the case. * Reopen a closed case. - -[discrete] -[[observability-case-templates]] -== Case templates - -preview::[] - -You can make the case creation process faster and more consistent by adding templates in *Cases -> Settings*. -A template defines values for one or all of the case fields (such as severity, tags, description, and title) as well as any <>. -When users create cases, they can optionally select a template and use its field values. - -NOTE: If you update or delete templates, existing cases are unaffected. \ No newline at end of file