The SIEM app is now a part of the Elastic Security solution.
Click
here to view SIEM documentation for previous releases.
Cases prerequisites
editCases prerequisites
editTo view cases, you need the Kibana space Read
privilege for the Security
feature. To create cases and add comments, you need the All
Kibana
space privilege for the Security
feature.
For more information, see Feature access based on user privileges.
To send cases to external systems, you need the appropriate license.