diff --git a/docs/cases/cases-ui-integrations.asciidoc b/docs/cases/cases-ui-integrations.asciidoc index 585ce0c85a..5471dceda4 100644 --- a/docs/cases/cases-ui-integrations.asciidoc +++ b/docs/cases/cases-ui-integrations.asciidoc @@ -34,6 +34,43 @@ image::images/cases-ui-connector.png[Shows the page for creating connectors] - {kibana-ref}/swimlane-action-type.html[{swimlane} connector] - {kibana-ref}/cases-webhook-action-type.html[{webhook-cm} connector] +[float] +[[mapped-case-fields]] +=== Mapped case fields + +When you export an {elastic-sec} case to an external system, case fields are mapped to existing fields in {sn}, {jira}, {ibm-r}, and {swimlane}. For the {webhook-cm} connector, case fields can be mapped to custom or pre-existing fields in the external system you're connecting to. + +Once fields are mapped, you can push updates to external systems, and mapped fields are overwritten or appended. Retrieving data from external systems is not supported. + +|=== + +| *Case field* | *Mapped field* + +| Title + +a| The case `Title` field is mapped to corresponding fields in external systems. Mapped field values are overwritten when you push updates. + +* *{sn}*: `Short description` +* *{jira}*: `Summary` +* *{ibm-r}*: `Name` +* *{swimlane}*: `Description` + +| Description +| The case `Description` field is mapped to the `Description` field in all systems. Mapped field values are overwritten when you push updates. + +| Comments + +a| The case `Comments` field is mapped to corresponding fields in external systems. + +* *{sn}*: `Work Notes` +* *{jira}*: `Comments` +* *{ibm-r}*: `Comments` +* *{swimlane}*: `Comments` + +New and edited comments are added to incident records when pushed to {sn}, {jira}, or {ibm-r}. Comments pushed to {swimlane} are appended to the `Comment` field in {swimlane} and posted individually. + +|=== + [[close-connector]] [float] [[close-sent-cases]]