cases.md

navigation_title	Cases
mapped_pages	https://www.elastic.co/guide/en/kibana/current/cases.html https://www.elastic.co/guide/en/security/current/cases-overview.html https://www.elastic.co/guide/en/observability/current/create-cases.html https://www.elastic.co/guide/en/serverless/current/security-cases-overview.html https://www.elastic.co/guide/en/serverless/current/observability-cases.html
applies_to	stack serverless ga ga
products	id kibana id security id observability id cloud-serverless
description	Track incidents, document findings, and coordinate response efforts with cases in Elastic Security, Observability, or Stack Management.

Cases [cases]

Cases give your team one place to investigate and resolve incidents. Attach alerts and evidence, collaborate in comments, and push updates to external systems like Jira or ServiceNow. You can use cases in {{elastic-sec}}, {{observability}}, or {{stack-manage-app}}.

Where to start [cases-get-started]

Your goal	Start here
Open your first case	Create cases
Set up connectors and team defaults	Configure case settings
Standardize case creation	Case templates
Control who can manage cases	Control access to cases
Use {{elastic-sec}} case features	Cases for {{elastic-sec}}