The SIEM app is now a part of the Elastic Security solution. Click here to view the current documentation.
IMPORTANT: No additional bug fixes or documentation updates will be released for this version.
« Get all case comments Get all case activity »
Elastic Docs ›SIEM Guide [7.8] ›SIEM APIs ›Cases API

Get comment

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Get comment

edit

Gets the specified comment.

Request URL

edit

GET <kibana host>:<port>/api/cases/<case ID>/comments/<comment ID>

URL parts

edit

The URL must include:

  • the case ID of the comment’s associated case (call Find cases to retrieve case IDs).
  • the comment ID of the comment you are retrieving (call Get all case comments to retrieve comment IDs).

Example request

edit

Retrieves comment ID 71ec1870-725b-11ea-a0b2-c51ea50a58e2 from case ID a18b38a0-71b0-11ea-a0b2-c51ea50a58e2:

GET api/cases/a18b38a0-71b0-11ea-a0b2-c51ea50a58e2/comments/71ec1870-725b-11ea-a0b2-c51ea50a58e2

Response code

edit
200
Indicates a successful call.

Response payload

edit

The requested comment JSON object.

Example response

edit
{
  "id": "71ec1870-725b-11ea-a0b2-c51ea50a58e2",
  "version": "WzEyOCwxXQ==",
  "comment": "Start operation bubblegum immediately! And chew fast!",
  "created_at": "2020-03-30T07:52:46.702Z",
  "created_by": {
    "email": "[email protected]",
    "full_name": "Classified",
    "username": "M"
  },
  "pushed_at": null,
  "pushed_by": null,
  "updated_at": null,
  "updated_by": null
}
« Get all case comments Get all case activity »