Get a case comment or alert
Server:
https://{kibana_url}
- GET /api/cases/{caseId}/comments/{commentId}
- GET /s/{space_id}/api/cases/{caseId}/comments/{commentId}
Refer to Spaces for more information.
You must have read privileges for the Cases feature in the Management, Observability, or Security section of the Kibana feature privileges, depending on the owner of the cases with the comments you're seeking.
Responses
Indicates a successful call.
One of:
-
alertIdstring -
created_atstring -
created_byobject -
emailstringrequired nullable -
full_namestringrequired nullable -
profile_uidstring -
usernamestringrequired nullable -
idstring -
indexstring -
owner -
The application that owns the cases: Stack Management, Observability, or Elastic Security.
-
Values:
casesobservabilitysecuritySolution -
pushed_atstringnullable -
pushed_byobjectnullable -
emailstringrequired nullable -
full_namestringrequired nullable -
profile_uidstring -
usernamestringrequired nullable -
typerequired -
Values:
alert -
updated_atstringnullable -
updated_byobjectnullable -
emailstringrequired nullable -
full_namestringrequired nullable -
profile_uidstring -
usernamestringrequired nullable -
versionstring
-
commentstring -
created_atstring -
created_by -
emailstringrequired nullable -
full_namestringrequired nullable -
profile_uidstring -
usernamestringrequired nullable -
idstring -
owner -
The application that owns the cases: Stack Management, Observability, or Elastic Security.
-
Values:
casesobservabilitysecuritySolution -
pushed_atstringnullable -
pushed_bynullable -
emailstringrequired nullable -
full_namestringrequired nullable -
profile_uidstring -
usernamestringrequired nullable -
typerequired -
Values:
user -
updated_atstringnullable -
updated_bynullable -
emailstringrequired nullable -
full_namestringrequired nullable -
profile_uidstring -
usernamestringrequired nullable -
versionstring
Authorization information is missing or invalid.
-
errorstring -
messagestring -
statusCodeinteger