Summary
PR #270518 updates the Attachments tab UI in case details so that each attachment-type table (alerts, files, etc.) only appears when at least one attachment of that type exists on the case. The Observables section is always shown regardless of content. A refresh/update button was also added to improve the search experience. Existing docs reference an Attachments tab but do not describe the conditional display behavior or the new refresh control.
Why this needs docs: The changed behavior — tables hidden when empty, observables always visible, new refresh button — is user-visible and contradicts any implicit assumption in docs that all sections are always present.
Resources
- PR #270518 — [Cases][AttachmentV2] Attachment tab ui update
Availability
| Channel |
Details |
| Stack |
v9.5.0 |
| Serverless |
Jun 1–Jun 5 |
| Feature flag |
None — active by default |
Created with Docs Quest Scanner by @nastasha-solomon
Suggested edits
Open and manage cases in Kibana > Attachments tab
- What the docs say: Docs mention attaching alerts, files, observables, or visualizations but do not describe the conditional display logic for attachment-type tables.
- What to add: Add a note explaining that each attachment-type table (alerts, files, visualizations) only appears when the case contains at least one attachment of that type; the Observables section is always present. Also document the new refresh/update button available on the attachments tab. Applies from 9.5.0 and in serverless.
Summary
PR #270518 updates the Attachments tab UI in case details so that each attachment-type table (alerts, files, etc.) only appears when at least one attachment of that type exists on the case. The Observables section is always shown regardless of content. A refresh/update button was also added to improve the search experience. Existing docs reference an Attachments tab but do not describe the conditional display behavior or the new refresh control.
Why this needs docs: The changed behavior — tables hidden when empty, observables always visible, new refresh button — is user-visible and contradicts any implicit assumption in docs that all sections are always present.
Resources
Availability
Created with Docs Quest Scanner by @nastasha-solomon
Suggested edits
Open and manage cases in Kibana > Attachments tab