Use cases

Browse these sections to see what you can accomplish with workflows. Each use case describes the patterns, triggers, and steps most relevant to it, with pointers into the reference documentation for each building block.

• Security: Automate alert response, case creation, enrichment, notification routing, and large-scale detection rule operations.
• Observability: Respond to anomaly detection alerts, correlate signals across data sources, and automate scheduled data operations.
• AI-augmented workflows: Combine workflows with Elastic Agent Builder agents so deterministic automation and AI reasoning work together.