Description

A search bar is added under Case view -> Attachment to allow users to search attachments. Previously search is available for files, we are expanding the functionality to allow users to search observable values, alert id, event id and file name.

Resources

PR: elastic/kibana#246265
Ticket: https://github.com/elastic/security-team/issues/14622

Which documentation set does this change impact?

Elastic On-Prem and Cloud (all)

Feature differences

No difference

What release is this request related to?

N/A

Serverless release

December 22, 2025

Collaboration model

The documentation team

Point of contact.

Main contact: @christineweng

Stakeholders: @melissaburpo