diff --git a/docs/cases/cases-manage.asciidoc b/docs/cases/cases-manage.asciidoc index f1f85c6025..218da56fb6 100644 --- a/docs/cases/cases-manage.asciidoc +++ b/docs/cases/cases-manage.asciidoc @@ -5,7 +5,7 @@ :frontmatter-tags-content-type: [how-to] :frontmatter-tags-user-goals: [analyze] -You can create and manage cases using the UI or the <>. +You can create and manage cases using the UI or the {api-kibana}/group/endpoint-cases[cases API]. [float] [[cases-ui-open]] diff --git a/docs/cases/cases-overview.asciidoc b/docs/cases/cases-overview.asciidoc index 757c2fd336..e44968724e 100644 --- a/docs/cases/cases-overview.asciidoc +++ b/docs/cases/cases-overview.asciidoc @@ -5,7 +5,7 @@ :frontmatter-tags-content-type: [overview] :frontmatter-tags-user-goals: [analyze] -Collect and share information about security issues by opening a case in {elastic-sec}. Cases allow you to track key investigation details, collect alerts in a central location, and more. The {elastic-sec} UI provides several ways to create and manage cases. Alternatively, you can use the <> to perform the same tasks. +Collect and share information about security issues by opening a case in {elastic-sec}. Cases allow you to track key investigation details, collect alerts in a central location, and more. The {elastic-sec} UI provides several ways to create and manage cases. Alternatively, you can use the {api-kibana}/group/endpoint-cases[cases API] to perform the same tasks. You can also send cases to these external systems by <>: diff --git a/docs/detections/alerts-add-to-cases.asciidoc b/docs/detections/alerts-add-to-cases.asciidoc index 75fcb9932e..989b44afc9 100644 --- a/docs/detections/alerts-add-to-cases.asciidoc +++ b/docs/detections/alerts-add-to-cases.asciidoc @@ -9,7 +9,7 @@ From the Alerts table, you can attach one or more alerts to a <>. +* After you add an alert to a case, you can remove it from the case activity under the alert summary or by using the {api-kibana}/group/endpoint-cases[cases API]. * Each case can have a maximum of 1,000 alerts. ===============================