This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
« Import timelines and timeline templates Actions API (for pushing cases to external systems) »
Elastic Docs ›Elastic Security Solution [8.16] ›Elastic Security APIs

Cases API

edit

Cases API

edit

You can create, manage, configure, and send cases to external systems with these APIs:

Cases return a warning header for deprecated endpoints. The value of the warning header is in the form 299 Kibana-{kibana_version} "{warning_text}"

  • Cases APIs: Used to open and manage security action items.
  • Connector APIs: Used to communicate with and send cases to external systems.
« Import timelines and timeline templates Actions API (for pushing cases to external systems) »