From 945781aa44ad9e7f8282ecaea35fc86b7b5871eb Mon Sep 17 00:00:00 2001 From: Nastasha Solomon Date: Thu, 16 Apr 2026 15:00:27 -0400 Subject: [PATCH 1/2] First draft --- docs/reference/advanced-settings.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/docs/reference/advanced-settings.md b/docs/reference/advanced-settings.md index 5e81d4c6de545..3787052342688 100644 --- a/docs/reference/advanced-settings.md +++ b/docs/reference/advanced-settings.md @@ -240,6 +240,15 @@ $$$banners-linkcolor$$$`banners:linkColor` {applies_to}`stack: ga 9.1` {applies_ $$$banners-backgroundcolor$$$`banners:backgroundColor` {applies_to}`stack: ga` {applies_to}`serverless: ga` : The color of the banner background for this space. Uses the value of the `xpack.banners.backgroundColor` configuration property by default. +### Cases [kibana-cases-settings] + +$$$cases:maxOpenCasesPerRuleRun$$$`cases:maxOpenCasesPerRuleRun` {applies_to}`stack: ga 9.4` {applies_to}`serverless: ga` +: Sets the maximum number of new cases the [Cases connector](/deploy-manage/manage-connectors.md) can open in one detection rule run when the rule includes a Cases action. Values must be between 1 and 1000; very high values can add load on {{kib}} and {{es}}. `20` by default. + +::::{note} +Does not apply to [Attack Discovery](/solutions/security/ai/attack-discovery.md), which uses a separate case-creation limit of `20`. +:::: + ### Discover [kibana-discover-settings] From a53097edec4e8b43d4a2921372b4ef966350b1b7 Mon Sep 17 00:00:00 2001 From: Nastasha Solomon Date: Thu, 16 Apr 2026 15:44:14 -0400 Subject: [PATCH 2/2] fix refs --- docs/reference/advanced-settings.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/reference/advanced-settings.md b/docs/reference/advanced-settings.md index 3787052342688..725295a909b0d 100644 --- a/docs/reference/advanced-settings.md +++ b/docs/reference/advanced-settings.md @@ -243,10 +243,10 @@ $$$banners-backgroundcolor$$$`banners:backgroundColor` {applies_to}`stack: ga` { ### Cases [kibana-cases-settings] $$$cases:maxOpenCasesPerRuleRun$$$`cases:maxOpenCasesPerRuleRun` {applies_to}`stack: ga 9.4` {applies_to}`serverless: ga` -: Sets the maximum number of new cases the [Cases connector](/deploy-manage/manage-connectors.md) can open in one detection rule run when the rule includes a Cases action. Values must be between 1 and 1000; very high values can add load on {{kib}} and {{es}}. `20` by default. +: Sets the maximum number of new cases the [Cases connector](docs-content://deploy-manage/manage-connectors.md) can open in one detection rule run when the rule includes a Cases action. Values must be between 1 and 1000. Very high values can add load on {{kib}} and {{es}}. `20` by default. ::::{note} -Does not apply to [Attack Discovery](/solutions/security/ai/attack-discovery.md), which uses a separate case-creation limit of `20`. +Does not apply to [Attack Discovery](docs-content://solutions/security/ai/attack-discovery.md), which uses a separate case-creation limit of `20`. ::::