stack kb cases update-case-template cli command

Auth required Idempotent Scope: global
elastic stack kb cases update-case-template \
  --template-id <template-id> \
  --definition <definition> \
  --owner <owner> \
  [options]
		

Update a case template

--template-id string required
The identifier for the template.
--definition string required
The template definition as a YAML string: case defaults (name, severity, category, tags, assignees, connector, settings) and a fields array of inline field definitions or $ref entries pointing into the owner's field library. Stored field values appear on cases under extended_fields keys shaped <field_name>_as_<storage_type>.
--owner enum required

Values: cases, observability, securitySolution

--dry-run
When true, validates the request without updating the template and returns {"valid": true}.
--description string
A description of the template.
--is-enabled
Disabled templates are hidden from the case creation flow.
--name string
The template identity name, unique per owner (case-insensitive). May be omitted when the YAML definition provides a case-default title (name:), which is then used as the identity name.
--tags string[]

Repeatable: pass --tags multiple times to supply more than one value

--input-file string
path to a JSON file to use as command input
--json

output as JSON