Summary
PR #272423 adds three new attachment types to Cases: Discover sessions (saved searches), Dashboards, and Maps. Users see these as new options in the Attach button within a case, and each is selected via a saved object picker. Dashboard and Map attachments capture a snapshot of the visualization at attachment time; if the original is later modified, the snapshot in the case is preserved. This feature is gated behind a feature flag in the current release (v9.5.0). The existing 'Attach objects to cases' docs page does not list any of these three attachment types — only Lens visualizations are covered for visualization-type attachments.
Why this needs docs: Three new UI-visible attachment options are being added that are completely absent from the current docs; users who encounter the new Attach button options will find no documentation explaining them.
Resources
- PR #272423 — [Cases][AttachmentV2] Discover session, dashboard and map as case attachments
Availability
| Channel |
Details |
| Stack |
v9.5.0 |
| Serverless |
Jun 29–Jul 3 |
| Feature flag |
is |
Created with Docs Quest Scanner by @nastasha-solomon
Suggested edits
Attach objects to cases > Attachment types overview table
- What the docs say: Supported attachment types: Alerts, Files, Observables, Lens visualizations, Events (Security only), Indicators (Security only), Timelines (Security only).
- What to add: Three new attachment types are missing from the table: Discover sessions (saved searches), Dashboards, and Maps. Each is selected via a saved object picker in the Attach button. Dashboard and Map attachments additionally capture a snapshot of the visualization at the time of attachment; if the original visualization is later modified, the case retains the snapshot. These options are visible in the UI only when the feature flag is enabled. The table and any surrounding explanatory text should be updated to include all three new types with appropriate notes about snapshot behavior and the feature flag requirement. Applies from 9.5.0 (feature flag required) and in serverless.
Summary
PR #272423 adds three new attachment types to Cases: Discover sessions (saved searches), Dashboards, and Maps. Users see these as new options in the Attach button within a case, and each is selected via a saved object picker. Dashboard and Map attachments capture a snapshot of the visualization at attachment time; if the original is later modified, the snapshot in the case is preserved. This feature is gated behind a feature flag in the current release (v9.5.0). The existing 'Attach objects to cases' docs page does not list any of these three attachment types — only Lens visualizations are covered for visualization-type attachments.
Why this needs docs: Three new UI-visible attachment options are being added that are completely absent from the current docs; users who encounter the new Attach button options will find no documentation explaining them.
Resources
Availability
Created with Docs Quest Scanner by @nastasha-solomon
Suggested edits
Attach objects to cases > Attachment types overview table