Cases
Note
Cases are in beta. Features may change, and some functionality may be limited.
Coralogix Cases is an operational issue management experience that helps teams understand, triage, and respond to real problems detected by alerts.
While alerts represent symptoms, Cases represent the operational problem and provide the context and workflow needed to investigate and resolve it. To learn how Cases differ from Incidents, see Cases vs. Incidents.
Quick start
Define which alerts create Cases. Select Settings, then Cases and configure Case filtering rules to control which alerts generate Cases automatically. See Set up Cases.
Route notifications. Add routing labels to alert definitions and configure routing rules in the Notification Center so the right teams get notified.
Triage and investigate. Open Alerts, then Cases to view all active and historical Cases. Filter, prioritize, and drill down into affected services and telemetry. See Working with Cases.
Integrate with external tools. Synchronize Cases with ServiceNow for lifecycle management across environments. See ServiceNow integration.
Why use Cases
Modern systems generate large volumes of alert activity. Without operational context, teams spend time interpreting signals instead of resolving issues. Cases provide:
- Operational focus --- respond to real problems, not individual alert events
- Ownership tracking --- engage the correct responders through notification workflows
- Curated triage --- understand impact with a 360-degree view of system behavior and telemetry
- External integration --- align workflows with systems like ServiceNow
- Noise reduction --- filter out short-lived or unstable alert activity
What you can do
- Set up Cases --- Configure filtering rules, timing, noise reduction, and notification routing
- Work with Cases --- View, filter, prioritize, and investigate triggered Cases
- Configure settings --- Manage Case configuration and preferences
- ServiceNow integration --- Synchronize Cases with ServiceNow for lifecycle management
- Cases vs. Incidents --- Understand how Cases differ from Incidents
Who should use Cases
- SRE and platform teams managing service reliability
- Security teams investigating operational impact
- DevOps teams responding to production issues
- IT and support teams integrating with ITSM workflows
- Engineering teams tracking operational response and reliability metrics
Related resources
Support
Reach our customer success team 24/7 via the in-app chat or by email at support@coralogix.com.