Introduction to Cases
Note
Cases are in beta. Features may change, and some functionality may be limited.
Coralogix Cases is an operational issue management experience that helps teams understand, triage, and respond to real problems detected by alerts.
While alerts represent symptoms, Cases represent the operational problem and provide the context and workflow needed to investigate and resolve it.
The key difference from Incidents is that Cases support operational response workflows, including notifications, ownership tracking, investigation context, and lifecycle management. Cases help teams understand what happened, what is impacted, and what to do next.
Cases provide a structured triage experience with a high-level 360° view of system behavior, affected services, and relevant telemetry within the correct timeframe. This helps teams move from detection to investigation without manually correlating data across multiple tools.
Cases also integrate with external operational systems, enabling notifications and lifecycle synchronization across environments.
To learn how Cases differ from Incidents, see Cases vs Incidents.
Why use Cases
Modern systems generate large volumes of alert activity. Without operational context, teams spend time interpreting signals instead of resolving issues.
Cases help teams:
- Respond to real operational problems rather than individual alert events
- Engage the correct responders through notification workflows
- Understand impact quickly with a curated triage view
- Track investigation progress and ownership
- Align operational workflows with external systems
- Reduce noise from short-lived or unstable alert activity
Cases provide operational clarity while working alongside existing alert rules.
Who should use Cases
Cases support teams responsible for operational response and issue resolution, including:
- SRE and platform teams managing service reliability
- Security teams investigating operational impact
- DevOps teams responding to production issues
- IT and support teams integrating with ITSM workflows
- Engineering teams tracking operational response and reliability metrics
Cases provide a consistent operational workflow whether issues are managed in the UI or through external systems such as ServiceNow.