---
type: api
title: Cases
description: Cases are used to open and track issues. You can add assignees and tags to your cases, set their severity and status, and add alerts, comments, and visualizations. You can also send cases to external incident management systems by configuring connectors.
url: https://www.elastic.co/docs/api/doc/kibana/group/endpoint-cases
resource: https://www.elastic.co/docs/api/doc/kibana/group/endpoint-cases
products:
  - Kibana
---

# Cases

`cases`

Cases are used to open and track issues. You can add assignees and tags to your cases, set their severity and status, and add alerts, comments, and visualizations. You can also send cases to external incident management systems by configuring connectors.

[Cases documentation](https://www.elastic.co/docs/explore-analyze/alerts-cases/cases)

- [Create a case](https://www.elastic.co/docs/api/doc/kibana/operation/operation-createcasedefaultspace): `POST` `/api/cases`, `POST` `/s/{space_id}/api/cases`
- [Update cases](https://www.elastic.co/docs/api/doc/kibana/operation/operation-updatecasedefaultspace): `PATCH` `/api/cases`, `PATCH` `/s/{space_id}/api/cases`
- [Delete cases](https://www.elastic.co/docs/api/doc/kibana/operation/operation-deletecasedefaultspace): `DELETE` `/api/cases`, `DELETE` `/s/{space_id}/api/cases`
- [Search cases](https://www.elastic.co/docs/api/doc/kibana/operation/operation-findcasesdefaultspace): `GET` `/api/cases/_find`, `GET` `/s/{space_id}/api/cases/_find`
- [Get cases for an alert](https://www.elastic.co/docs/api/doc/kibana/operation/operation-getcasesbyalertdefaultspace): `GET` `/api/cases/alerts/{alertId}`, `GET` `/s/{space_id}/api/cases/alerts/{alertId}`
- [Get case settings](https://www.elastic.co/docs/api/doc/kibana/operation/operation-getcaseconfigurationdefaultspace): `GET` `/api/cases/configure`, `GET` `/s/{space_id}/api/cases/configure`
- [Add case settings](https://www.elastic.co/docs/api/doc/kibana/operation/operation-setcaseconfigurationdefaultspace): `POST` `/api/cases/configure`, `POST` `/s/{space_id}/api/cases/configure`
- [Get case connectors](https://www.elastic.co/docs/api/doc/kibana/operation/operation-findcaseconnectorsdefaultspace): `GET` `/api/cases/configure/connectors/_find`, `GET` `/s/{space_id}/api/cases/configure/connectors/_find`
- [Update case settings](https://www.elastic.co/docs/api/doc/kibana/operation/operation-updatecaseconfigurationdefaultspace): `PATCH` `/api/cases/configure/{configurationId}`, `PATCH` `/s/{space_id}/api/cases/configure/{configurationId}`
- [Get all field definitions](https://www.elastic.co/docs/api/doc/kibana/operation/operation-getcasefielddefinitionsdefaultspace): `GET` `/api/cases/field_definitions`, `GET` `/s/{space_id}/api/cases/field_definitions`
- [Create a field definition](https://www.elastic.co/docs/api/doc/kibana/operation/operation-createcasefielddefinitiondefaultspace): `POST` `/api/cases/field_definitions`, `POST` `/s/{space_id}/api/cases/field_definitions`
- [Get a field definition by ID](https://www.elastic.co/docs/api/doc/kibana/operation/operation-getcasefielddefinitiondefaultspace): `GET` `/api/cases/field_definitions/{field_definition_id}`, `GET` `/s/{space_id}/api/cases/field_definitions/{field_definition_id}`
- [Update a field definition](https://www.elastic.co/docs/api/doc/kibana/operation/operation-updatecasefielddefinitiondefaultspace): `PUT` `/api/cases/field_definitions/{field_definition_id}`, `PUT` `/s/{space_id}/api/cases/field_definitions/{field_definition_id}`
- [Delete a field definition](https://www.elastic.co/docs/api/doc/kibana/operation/operation-deletecasefielddefinitiondefaultspace): `DELETE` `/api/cases/field_definitions/{field_definition_id}`, `DELETE` `/s/{space_id}/api/cases/field_definitions/{field_definition_id}`
- [Get the fields applicable to a case](https://www.elastic.co/docs/api/doc/kibana/operation/operation-getapplicablefieldsdefaultspace): `GET` `/api/cases/fields`, `GET` `/s/{space_id}/api/cases/fields`
- [Get case creators](https://www.elastic.co/docs/api/doc/kibana/operation/operation-getcasereportersdefaultspace): `GET` `/api/cases/reporters`
- [Get case tags](https://www.elastic.co/docs/api/doc/kibana/operation/operation-getcasetagsdefaultspace): `GET` `/api/cases/tags`, `GET` `/s/{space_id}/api/cases/tags`
- [Get all case templates](https://www.elastic.co/docs/api/doc/kibana/operation/operation-getcasetemplatesdefaultspace): `GET` `/api/cases/templates`, `GET` `/s/{space_id}/api/cases/templates`
- [Create a case template](https://www.elastic.co/docs/api/doc/kibana/operation/operation-createcasetemplatedefaultspace): `POST` `/api/cases/templates`, `POST` `/s/{space_id}/api/cases/templates`
- [Get a case template by ID](https://www.elastic.co/docs/api/doc/kibana/operation/operation-getcasetemplatedefaultspace): `GET` `/api/cases/templates/{template_id}`, `GET` `/s/{space_id}/api/cases/templates/{template_id}`
- [Update a case template](https://www.elastic.co/docs/api/doc/kibana/operation/operation-updatecasetemplatedefaultspace): `PUT` `/api/cases/templates/{template_id}`, `PUT` `/s/{space_id}/api/cases/templates/{template_id}`
- [Delete a case template](https://www.elastic.co/docs/api/doc/kibana/operation/operation-deletecasetemplatedefaultspace): `DELETE` `/api/cases/templates/{template_id}`, `DELETE` `/s/{space_id}/api/cases/templates/{template_id}`
- [Get case information](https://www.elastic.co/docs/api/doc/kibana/operation/operation-getcasedefaultspace): `GET` `/api/cases/{caseId}`, `GET` `/s/{space_id}/api/cases/{caseId}`
- [Get all alerts for a case](https://www.elastic.co/docs/api/doc/kibana/operation/operation-getcasealertsdefaultspace): `GET` `/api/cases/{caseId}/alerts`, `GET` `/s/{space_id}/api/cases/{caseId}/alerts`
- [Find case attachments](https://www.elastic.co/docs/api/doc/kibana/operation/operation-findcaseattachmentsdefaultspace): `GET` `/api/cases/{caseId}/attachments`, `GET` `/s/{space_id}/api/cases/{caseId}/attachments`
- [Create a case attachment](https://www.elastic.co/docs/api/doc/kibana/operation/operation-createcaseattachmentdefaultspace): `POST` `/api/cases/{caseId}/attachments`, `POST` `/s/{space_id}/api/cases/{caseId}/attachments`
- [Delete all case attachments](https://www.elastic.co/docs/api/doc/kibana/operation/operation-deletecaseattachmentsdefaultspace): `DELETE` `/api/cases/{caseId}/attachments`, `DELETE` `/s/{space_id}/api/cases/{caseId}/attachments`
- [Get a case attachment](https://www.elastic.co/docs/api/doc/kibana/operation/operation-getcaseattachmentdefaultspace): `GET` `/api/cases/{caseId}/attachments/{attachmentId}`, `GET` `/s/{space_id}/api/cases/{caseId}/attachments/{attachmentId}`
- [Replace a case attachment](https://www.elastic.co/docs/api/doc/kibana/operation/operation-replacecaseattachmentdefaultspace): `PUT` `/api/cases/{caseId}/attachments/{attachmentId}`, `PUT` `/s/{space_id}/api/cases/{caseId}/attachments/{attachmentId}`
- [Delete a case attachment](https://www.elastic.co/docs/api/doc/kibana/operation/operation-deletecaseattachmentdefaultspace): `DELETE` `/api/cases/{caseId}/attachments/{attachmentId}`, `DELETE` `/s/{space_id}/api/cases/{caseId}/attachments/{attachmentId}`
- [Add a case comment or alert](https://www.elastic.co/docs/api/doc/kibana/operation/operation-addcasecommentdefaultspace): `POST` `/api/cases/{caseId}/comments`, `POST` `/s/{space_id}/api/cases/{caseId}/comments`
- [Update a case comment or alert](https://www.elastic.co/docs/api/doc/kibana/operation/operation-updatecasecommentdefaultspace): `PATCH` `/api/cases/{caseId}/comments`, `PATCH` `/s/{space_id}/api/cases/{caseId}/comments`
- [Delete all case comments and alerts](https://www.elastic.co/docs/api/doc/kibana/operation/operation-deletecasecommentsdefaultspace): `DELETE` `/api/cases/{caseId}/comments`, `DELETE` `/s/{space_id}/api/cases/{caseId}/comments`
- [Find case comments](https://www.elastic.co/docs/api/doc/kibana/operation/operation-findcasecommentsdefaultspace): `GET` `/api/cases/{caseId}/comments/_find`, `GET` `/s/{space_id}/api/cases/{caseId}/comments/_find`
- [Get a case comment or alert](https://www.elastic.co/docs/api/doc/kibana/operation/operation-getcasecommentdefaultspace): `GET` `/api/cases/{caseId}/comments/{commentId}`, `GET` `/s/{space_id}/api/cases/{caseId}/comments/{commentId}`
- [Delete a case comment or alert](https://www.elastic.co/docs/api/doc/kibana/operation/operation-deletecasecommentdefaultspace): `DELETE` `/api/cases/{caseId}/comments/{commentId}`, `DELETE` `/s/{space_id}/api/cases/{caseId}/comments/{commentId}`
- [Push a case to an external service](https://www.elastic.co/docs/api/doc/kibana/operation/operation-pushcasedefaultspace): `POST` `/api/cases/{caseId}/connector/{connectorId}/_push`, `POST` `/s/{space_id}/api/cases/{caseId}/connector/{connectorId}/_push`
- [Get the fields applicable to an existing case](https://www.elastic.co/docs/api/doc/kibana/operation/operation-getcaseapplicablefieldsdefaultspace): `GET` `/api/cases/{caseId}/fields`, `GET` `/s/{space_id}/api/cases/{caseId}/fields`
- [Attach a file to a case](https://www.elastic.co/docs/api/doc/kibana/operation/operation-addcasefiledefaultspace): `POST` `/api/cases/{caseId}/files`, `POST` `/s/{space_id}/api/cases/{caseId}/files`
- [Find case activity](https://www.elastic.co/docs/api/doc/kibana/operation/operation-findcaseactivitydefaultspace): `GET` `/api/cases/{caseId}/user_actions/_find`, `GET` `/s/{space_id}/api/cases/{caseId}/user_actions/_find`