Cases
Cases are used to open and track issues. You can add assignees and tags to your cases, set their severity and status, and add alerts, comments, and visualizations. You can also send cases to external incident management systems by configuring connectors.
-
Create a case
- POST /api/cases
-
Update cases
- PATCH /api/cases
-
Delete cases
- DELETE /api/cases
-
Search cases
- GET /api/cases/_find
-
Get cases for an alert
- GET /api/cases/alerts/{alertId}
-
Get case settings
- GET /api/cases/configure
-
Add case settings
- POST /api/cases/configure
-
Get case connectors
- GET /api/cases/configure/connectors/_find
-
Update case settings
- PATCH /api/cases/configure/{configurationId}
-
Get case creators
- GET /api/cases/reporters
-
Get case status summary
Deprecated
- GET /api/cases/status
-
Get case tags
- GET /api/cases/tags
-
Get case information
- GET /api/cases/{caseId}
-
Get all alerts for a case
- GET /api/cases/{caseId}/alerts
-
Get all case comments
Deprecated
- GET /api/cases/{caseId}/comments
-
Add a case comment or alert
- POST /api/cases/{caseId}/comments
-
Update a case comment or alert
- PATCH /api/cases/{caseId}/comments
-
Delete all case comments and alerts
- DELETE /api/cases/{caseId}/comments
-
Find case comments and alerts
- GET /api/cases/{caseId}/comments/_find
-
Get a case comment or alert
- GET /api/cases/{caseId}/comments/{commentId}
-
Delete a case comment or alert
- DELETE /api/cases/{caseId}/comments/{commentId}
-
Push a case to an external service
- POST /api/cases/{caseId}/connector/{connectorId}/_push
-
Attach a file to a case
- POST /api/cases/{caseId}/files
-
Get case activity
Deprecated
- GET /api/cases/{caseId}/user_actions
-
Find case activity
- GET /api/cases/{caseId}/user_actions/_find