Skip to content
37 changes: 37 additions & 0 deletions docs/cases/cases-ui-integrations.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,43 @@ image::images/cases-ui-connector.png[Shows the page for creating connectors]
- {kibana-ref}/swimlane-action-type.html[{swimlane} connector]
- {kibana-ref}/cases-webhook-action-type.html[{webhook-cm} connector]

[float]
[[mapped-case-fields]]
=== Mapped case fields

When you export an {elastic-sec} case to an external system, case fields are mapped to existing fields in {sn}, {jira}, {ibm-r}, and {swimlane}. For the {webhook-cm} connector, case fields can be mapped to custom or pre-existing fields in the external system you're connecting to.

Once fields are mapped, you can push updates to external systems, and mapped fields are overwritten or appended. Retrieving data from external systems is not supported.

|===

| *Case field* | *Mapped field*

| Title

a| The case `Title` field is mapped to corresponding fields in external systems. Mapped field values are overwritten when you push updates.

* *{sn}*: `Short description`
* *{jira}*: `Summary`
* *{ibm-r}*: `Name`
* *{swimlane}*: `Description`

| Description
| The case `Description` field is mapped to the `Description` field in all systems. Mapped field values are overwritten when you push updates.

| Comments

a| The case `Comments` field is mapped to corresponding fields in external systems.

* *{sn}*: `Work Notes`
* *{jira}*: `Comments`
* *{ibm-r}*: `Comments`
* *{swimlane}*: `Comments`

New and edited comments are added to incident records when pushed to {sn}, {jira}, or {ibm-r}. Comments pushed to {swimlane} are appended to the `Comment` field in {swimlane} and posted individually.

|===

[[close-connector]]
[float]
[[close-sent-cases]]
Expand Down