Cases
Cases are used to open and track issues. You can add assignees and tags to your cases, set their severity and status, and add alerts, comments, and visualizations. You can also send cases to external incident management systems by configuring connectors.
34 endpoints
-
Delete cases
- DELETE /api/cases
-
Update cases
- PATCH /api/cases
-
Create a case
- POST /api/cases
-
Search cases
- GET /api/cases/_find
-
Get case information
- GET /api/cases/{caseId}
-
Get all alerts for a case
- GET /api/cases/{caseId}/alerts
-
Delete all case comments and alerts
- DELETE /api/cases/{caseId}/comments
-
Update a case comment or alert
- PATCH /api/cases/{caseId}/comments
-
Add a case comment or alert
- POST /api/cases/{caseId}/comments
-
Find case comments
- GET /api/cases/{caseId}/comments/_find
-
Delete a case comment or alert
- DELETE /api/cases/{caseId}/comments/{commentId}
-
Get a case comment or alert
- GET /api/cases/{caseId}/comments/{commentId}
-
Push a case to an external service
- POST /api/cases/{caseId}/connector/{connectorId}/_push
-
Get the fields applicable to an existing case
- GET /api/cases/{caseId}/fields
-
Attach a file to a case
- POST /api/cases/{caseId}/files
-
Find case activity
- GET /api/cases/{caseId}/user_actions/_find
-
Get cases for an alert
- GET /api/cases/alerts/{alertId}
-
Get case settings
- GET /api/cases/configure
-
Add case settings
- POST /api/cases/configure
-
Update case settings
- PATCH /api/cases/configure/{configurationId}
-
Get case connectors
- GET /api/cases/configure/connectors/_find
-
Get all field definitions
- GET /api/cases/field_definitions
-
Create a field definition
- POST /api/cases/field_definitions
-
Delete a field definition
- DELETE /api/cases/field_definitions/{field_definition_id}
-
Get a field definition by ID
- GET /api/cases/field_definitions/{field_definition_id}
-
Update a field definition
- PUT /api/cases/field_definitions/{field_definition_id}
-
Get the fields applicable to a case
- GET /api/cases/fields
-
Get case creators
- GET /api/cases/reporters
-
Get case tags
- GET /api/cases/tags
-
Get all case templates
- GET /api/cases/templates
-
Create a case template
- POST /api/cases/templates
-
Delete a case template
- DELETE /api/cases/templates/{template_id}
-
Get a case template by ID
- GET /api/cases/templates/{template_id}
-
Update a case template
- PUT /api/cases/templates/{template_id}