IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.

› › ›

Push case

edit

Push case

edit

Push case to an external service.

Console supports only Elasticsearch APIs. Console doesn’t allow interactions with Kibana APIs. You must use curl or another HTTP tool instead. For more information, refer to Run Elasticsearch API requests.

Request URL

edit

POST <kibana host>:<port>/api/cases/<case ID>/connector/<connector ID>/_push

URL parts

edit

The URL must include:

the case ID of the case (call Find cases to retrieve case IDs).
the connector ID of the connector to use (call Find connectors to retrieve connector IDs).

Example request

edit

Push the case to an external service.

POST api/cases/7349772f-421a-4de3-b8bb-2d9b22ccee30/connector/abed3a70-71bd-11ea-a0b2-c51ea50a58e2/_push
{}

Response code

edit

200: Indicates a successful call.

Response payload

edit

A JSON object representing the pushed case.

Example response

edit

{
  "id": "a18b38a0-71b0-11ea-a0b2-c51ea50a58e2",
  "version": "Wzk4LDFd",
  "comments": [],
  "totalComment": 0,
  "closed_at": null,
  "closed_by": null,
  "created_at": "2020-03-29T11:30:02.658Z",
  "created_by": {
    "email": "ahunley@imf.usa.gov",
    "full_name": "Alan Hunley",
    "username": "ahunley"
  },
  "external_service": {
    "pushed_at":"2021-07-26T18:19:43.688Z",
    "pushed_by":{
        "username":"classified@hms.oo.gov.uk",
        "full_name":null,
        "email":null
    },
    "connector_id":"3d6c7b20-e5ab-11eb-98bb-85a0e2a49315",
    "connector_name":"Test",
    "external_id":"10110",
    "external_title":"TPN-103",
    "external_url":"https://cases.jira.com"
  },
  "updated_at": "2020-03-29T12:01:50.244Z",
  "updated_by": {
    "full_name": "Classified",
    "email": "classified@hms.oo.gov.uk",
    "username": "M"
  },
  "description": "James Bond clicked on a highly suspicious email banner advertising cheap holidays for underpaid civil servants. Operation bubblegum is active. Repeat - operation bubblegum is now active!",
  "title": "This case will self-destruct in 5 seconds",
  "status": "open",
  "connector": {
    "id": "131d4448-abe0-4789-939d-8ef60680b498",
    "name": "My connector",
    "type": ".jira",
    "fields": {
      "issueType": "10006",
      "priority": "High",
    }
  },
  "settings": {
    "syncAlerts": true
  },
  "owner": "securitySolution",
  "tags": [
    "phishing",
    "social engineering",
    "bubblegum"
  ]
}

« Find connectors Find cases by alert »