Skip to content

Fix: createCaseTool owner should be securitySolution, not observability#6

Open
one3qualsone wants to merge 1 commit into
elastic:mainfrom
one3qualsone:fix/createcasetool-owner-and-severity
Open

Fix: createCaseTool owner should be securitySolution, not observability#6
one3qualsone wants to merge 1 commit into
elastic:mainfrom
one3qualsone:fix/createcasetool-owner-and-severity

Conversation

@one3qualsone

Copy link
Copy Markdown

The createCaseTool workflow is categorised under security/response but creates cases with owner: observability, causing them to appear in Observability > Cases instead of Security > Cases in Kibana.

Changes:

  • owner: observability -> owner: securitySolution
  • Added severity input (defaults to "medium") instead of hardcoded "high"
  • Added syncAlerts: true for security case alert linking
  • Updated tags from "Observability" to "Security"
  • Removed extra quotes around description Liquid expression
  • Added input descriptions

The createCaseTool workflow is categorised under security/response but
creates cases with owner: observability, causing them to appear in
Observability > Cases instead of Security > Cases in Kibana.

Changes:
- owner: observability -> owner: securitySolution
- Added severity input (defaults to "medium") instead of hardcoded "high"
- Added syncAlerts: true for security case alert linking
- Updated tags from "Observability" to "Security"
- Removed extra quotes around description Liquid expression
- Added input descriptions

Co-authored-by: Cursor <cursoragent@cursor.com>
@cla-checker-service

Copy link
Copy Markdown

❌ Author of the following commits did not sign a Contributor Agreement:
b1a50cc

Please, read and sign the above mentioned agreement if you want to contribute to this project

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants