Get all case comments

edit

Returns all comments for the specified case.

The Kibana Console supports only Elasticsearch APIs. You cannot interact with the Kibana APIs with the Console and must use curl or another HTTP tool instead. For more information, refer to Console.

Request URL

edit

GET <kibana host>:<port>/api/cases/<case ID>/comments

URL parts

edit

The URL must include the case ID of the case for which you are retrieving comments. Call Find cases to retrieve case IDs.

Example request

edit

Gets all comments for case ID a18b38a0-71b0-11ea-a0b2-c51ea50a58e2:

GET api/cases/a18b38a0-71b0-11ea-a0b2-c51ea50a58e2/comments

Response code

edit
200
Indicates a successful call.

Response payload

edit

A JSON array containing all comments for the specified case.

Response example

edit
[
  {
    "id": "c6f0dca0-71b3-11ea-a0b2-c51ea50a58e2",
    "version": "WzEwNSwxXQ==",
    "type": "user",
    "comment": "That is nothing - Ethan Hunt answered a targeted social media campaign promoting phishy pension schemes to IMF operatives. Even worse, he likes baked beans.",
    "created_at": "2020-03-29T11:52:33.889Z",
    "created_by": {
      "email": "[email protected]",
      "full_name": "Ms Moneypenny",
      "username": "moneypenny"
    },
    "pushed_at": null,
    "pushed_by": null,
    "updated_at": "2020-03-29T12:14:32.997Z",
    "updated_by": {
      "email": "[email protected]",
      "full_name": "James Bond",
      "username": "_007"
    }
  },
  {
    "id": "71ec1870-725b-11ea-a0b2-c51ea50a58e2",
    "type": "user",
    "version": "WzEyOCwxXQ==",
    "comment": "Start operation bubblegum immediately! And chew fast!",
    "created_at": "2020-03-30T07:52:46.702Z",
    "created_by": {
      "email": "[email protected]",
      "full_name": "Classified",
      "username": "M"
    },
    "pushed_at": null,
    "pushed_by": null,
    "updated_at": null,
    "updated_by": null
  },
  {
    "type":"alert",
    "alertId":"9241255e1e761ff068768671f6971bcbef869862b02188971036ed4ebba842f1",
    "index":".siem-signals-siem-estc-dev-default-000028",
    "version": "WyEzOCwxXQ==",
    "created_at": "2020-03-31T07:52:46.702Z",
    "created_by": {
      "email": "[email protected]",
      "full_name": "Classified",
      "username": "M"
    },
    "pushed_at": null,
    "pushed_by": null,
    "updated_at": null,
    "updated_by": null
  }
]