Sign in

v1

latestOpenAPI 3.1.0Elastic 2.02026-07-179371211.2 KB
Detections

Get Detection History

Retrieves a specific detection's audit history given an internal detection ID.

get/connect/detection/{id}/history

Path parameters

idstring required

The detection ID to retrieve

Response

The array of history audit objects. Note that these objects will also contain either the Detection fields or a DetectionComment fields.

createTimestring

The date and time that this object was created. This is a read-only field.

idstring

The ID assigned to this object by the server. This is a read-only field.

kindstring

The kind of object. This is a read-only field.

operationstring

The operation that was applied to the object. This is a read-only field.

updateTimestring

The date and time that this object was last modified. This is a read-only field.

userIdstring

The user ID (or API client ID) that initiated this event. This is a read-only field.

Example response

[
  {
    "createTime": "2024-11-14T15:03:22Z",
    "id": "PdFc-JIBLkNJ8-bDfz47",
    "kind": "case",
    "operation": "create",
    "updateTime": "2024-11-14T15:33:02Z",
    "userId": "socl_my_new_client"
  }
]