From 75095877669b2b149ad448c4c3c8263ea32689a2 Mon Sep 17 00:00:00 2001 From: "nastasha.solomon" Date: Thu, 5 Dec 2024 22:09:55 -0500 Subject: [PATCH 1/2] First draft --- docs/serverless/investigate/cases-open-manage.asciidoc | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/serverless/investigate/cases-open-manage.asciidoc b/docs/serverless/investigate/cases-open-manage.asciidoc index 16dce41c40..a438b5f535 100644 --- a/docs/serverless/investigate/cases-open-manage.asciidoc +++ b/docs/serverless/investigate/cases-open-manage.asciidoc @@ -248,13 +248,13 @@ Use the **Export** option to move cases between different {elastic-sec} instance ==== The following attachments are _not_ exported: -* **Case files**: Case files are not exported. However, they are accessible in **Project settings** → **Management** → **Files** to download and re-add. +* **Case files**: Case files are not exported. However, they are accessible in **Project Settings** → **Stack Management** → **Files** to download and re-add. * **Alerts**: Alerts attached to cases are not exported. You must re-add them after importing cases. ==== To export a case: -. Go to **Project settings** → **Management** → **Saved objects**. +. Go to **Project Settings** → **Stack Management** → **Saved objects**. . Search for the case by choosing a saved object type or entering the case title in the search bar. . Select one or more cases, then click the **Export** button. . Click **Export**. A confirmation message that your file is downloading displays. @@ -283,6 +283,6 @@ To import a case: ==== Be mindful of the following: -* If the imported case had connectors attached to it, you'll be prompted to re-authenticate the connectors. To do so, click **Go to connectors** on the **Import saved objects** flyout and complete the necessary steps. Alternatively, open the main menu, then go to **Project settings** → **Management** → **{connectors-ui}** to access connectors. +* If the imported case had connectors attached to it, you'll be prompted to re-authenticate the connectors. To do so, click **Go to connectors** on the **Import saved objects** flyout and complete the necessary steps. Alternatively, open the main menu, then go to **Project Settings** → **Stack Management** → **{connectors-ui}** to access connectors. * If the imported case had attached alerts, verify that the alerts' source documents exist in the environment. Case features that interact with alerts (such as the Alert details flyout and rule details page) rely on the alerts' source documents to function. ==== From c79404c66d5ec5020b9add32d55e77e38972f6ba Mon Sep 17 00:00:00 2001 From: "nastasha.solomon" Date: Thu, 5 Dec 2024 22:11:55 -0500 Subject: [PATCH 2/2] Update case-permissions.asciidoc --- docs/serverless/investigate/case-permissions.asciidoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/serverless/investigate/case-permissions.asciidoc b/docs/serverless/investigate/case-permissions.asciidoc index 237a29c724..e482f118aa 100644 --- a/docs/serverless/investigate/case-permissions.asciidoc +++ b/docs/serverless/investigate/case-permissions.asciidoc @@ -26,7 +26,7 @@ To grant access to cases in a custom role, set the privileges for the **Cases** | Give full access to manage cases and settings a| * **All** for the **Cases** feature under **Security** -* **All** for the **{connectors-feature}** feature under **Management** +* **All** for the **{connectors-feature}** feature under **Stack Management** [NOTE] ====