v1

latestOpenAPI 3.1.0Elastic 2.02026-07-179371211.2 KB
Cases

Get Related Events

Searches for all related events associated with the given case ID and returns the matching events, if any. If the case does not exist, this method will respond with a 200 status and an empty list.

get/connect/case/events/{id}

Path parameters

idstring required

The case ID to use for searching all related events

Response

The array of related events, or an empty array if no matching events found

caseIdstring required

The case ID for which this related event is to be attached, or is already attached.

createTimestring

The date and time that this object was created. This is a read-only field.

fieldsobject required

A mapping of related event field names and their values.

idstring

The ID assigned to this object by the server. This is a read-only field.

kindstring

The kind of object. This is a read-only field.

operationstring

The operation that was applied to the object. This is a read-only field.

updateTimestring

The date and time that this object was last modified. This is a read-only field.

userIdstring

The user ID (or API client ID) that initiated this event. This is a read-only field.

Example response

[
  {
    "caseId": "PdFc-JIBLkNJ8-bDfz47",
    "createTime": "2024-11-14T15:03:22Z",
    "fields": {
      "client.ip": "1.2.3.4",
      "client.port": "1099"
    },
    "id": "PdFc-JIBLkNJ8-bDfz47",
    "kind": "case",
    "operation": "create",
    "updateTime": "2024-11-14T15:33:02Z",
    "userId": "socl_my_new_client"
  }
]