Path parameters

• caseId string Required

  The identifier for the case. To retrieve case IDs, use the find cases API. All non-ASCII characters must be URL encoded.

• commentId string Required

  The identifier for the comment. To retrieve comment IDs, use the get case or find cases APIs.

Responses

• 200 application/json; Elastic-Api-Version=2023-10-31

  Indicates a successful call.

  One of:

  Cases_alert_comment_response_properties object Cases_user_comment_response_properties object

  Hide attributes Show attributes

  • alertId array[string]
  • created_at string(date-time)
  • created_by object
    Hide created_by attributes Show created_by attributes object

    • email string | null Required
    • full_name string | null Required
    • profile_uid string
    • username string | null Required
  • id string
  • index array[string]
  • owner string

    The application that owns the cases: Stack Management, Observability, or Elastic Security.

    Values are cases, observability, or securitySolution.

  • pushed_at string(date-time) | null
  • pushed_by object | null
    Hide pushed_by attributes Show pushed_by attributes object | null

    • email string | null Required
    • full_name string | null Required
    • profile_uid string
    • username string | null Required
  • rule object
    Hide rule attributes Show rule attributes object

    • id string

      The rule identifier.

    • name string

      The rule name.

  • type string Required

    Value is alert.

  • updated_at string(date-time) | null
  • updated_by object | null
    Hide updated_by attributes Show updated_by attributes object | null

    • email string | null Required
    • full_name string | null Required
    • profile_uid string
    • username string | null Required
  • version string

  Hide attributes Show attributes

  • comment string
  • created_at string(date-time)
  • created_by object
    Hide created_by attributes Show created_by attributes object

    • email string | null Required
    • full_name string | null Required
    • profile_uid string
    • username string | null Required
  • id string
  • owner string

    The application that owns the cases: Stack Management, Observability, or Elastic Security.

    Values are cases, observability, or securitySolution.

  • pushed_at string(date-time) | null
  • pushed_by object | null
    Hide pushed_by attributes Show pushed_by attributes object | null

    • email string | null Required
    • full_name string | null Required
    • profile_uid string
    • username string | null Required
  • type string Required

    Value is user.

  • updated_at string(date-time) | null
  • updated_by object | null
    Hide updated_by attributes Show updated_by attributes object | null

    • email string | null Required
    • full_name string | null Required
    • profile_uid string
    • username string | null Required
  • version string
• 401 application/json; Elastic-Api-Version=2023-10-31

  Authorization information is missing or invalid.

  Hide response attributes Show response attributes object

  • error string
  • message string
  • statusCode integer