Get a case comment or alert

Base URL
https://{kibana_url}
Auth

You must have read privileges for the Cases feature in the Management, Observability, or Security section of the Kibana feature privileges, depending on the owner of the cases with the comments you're seeking.

Path parameters

space_id string optional

An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.

caseId string required

The identifier for the case. To retrieve case IDs, use the search cases (_find) API. All non-ASCII characters must be URL encoded.

Example: 9c235210-6834-11ea-a78c-6ffb38a34414
commentId string required

The identifier for the comment. To retrieve comment IDs, use the get case or search cases (_find) APIs.

Example: 71ec1870-725b-11ea-a0b2-c51ea50a58e2

Responses

Indicates a successful call.

application/json
One of:
type enum required
Values: alert
alertId string[]
created_at string · format: date-time
created_by object
email string required nullable
full_name string required nullable
profile_uid string
username string required nullable
id string
index string[]
owner enum

The application that owns the cases: Stack Management, Observability, or Elastic Security.

Values: cases observability securitySolution
pushed_at string · format: date-time nullable
pushed_by object nullable
email string required nullable
full_name string required nullable
profile_uid string
username string required nullable
rule object
id string nullable

The rule identifier.

name string nullable

The rule name.

updated_at string · format: date-time nullable
updated_by object nullable
email string required nullable
full_name string required nullable
profile_uid string
username string required nullable
version string

Authorization information is missing or invalid.

application/json
error string
message string
statusCode integer
Base URL
https://{kibana_url}