Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[8.13] Add limit for number of alerts per case (#5062) #5064

Merged
merged 2 commits into from
Apr 10, 2024
Merged

[8.13] Add limit for number of alerts per case (#5062) #5064

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a0672d4
Add limit for number of alerts per case (#5062)
lcawl Apr 9, 2024
f55fe14
Merge branch '8.13' into backport/8.13/pr-5062
lcawl Apr 10, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions docs/cases/cases-manage.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -173,6 +173,8 @@ To explore the alerts attached to a case, click the *Alerts* tab. In the table,
[role="screenshot"]
image::images/cases-alert-tab.png[Shows you the Alerts tab]

NOTE: Each case can have a maximum of 1,000 alerts.

[float]
[[cases-add-files]]
=== Add files
Expand Down
6 changes: 5 additions & 1 deletion docs/detections/alerts-add-to-cases.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,11 @@

From the Alerts table, you can attach one or more alerts to a <<signals-to-new-cases,new case>> or <<signals-to-existing-cases,an existing one>>. Alerts from any rule type can be added to a case.

NOTE: Once you've added an alert to a case, you can only remove it through the <<cases-api-overview,Elastic Security Cases API>>.
[NOTE]
===============================
* After you add an alert to a case, you can remove it from the case activity under the alert summary or by using the <<cases-api-overview,Elastic Security Cases API>>.
* Each case can have a maximum of 1,000 alerts.
===============================

[role="screenshot"]
image::images/add-alert-to-case.gif[width=50%][height=50%][Animation of adding an alert to a case]
Expand Down