Type to search.

Find case comments

Base URL
https://{kibana_url}
  • GET /api/cases/{caseId}/comments/_find
Auth

Retrieves a paginated list of comments for a case. You must have read privileges for the Cases feature in the Management, Observability, or Security section of the Kibana feature privileges, depending on the owner of the cases with the comments you're seeking.

Path parameters

caseId string required

The identifier for the case. To retrieve case IDs, use the search cases (_find) API. All non-ASCII characters must be URL encoded.

Example: 9c235210-6834-11ea-a78c-6ffb38a34414

Query parameters

page integer · default: 1

The page number to return.

perPage integer · max: 100 · default: 20

The number of items to return. Limited to 100 items.

sortOrder enum · default: desc

Determines the sort order.

Values: asc desc

Responses

Indicates a successful call.

application/json
comments object[] required

Paginated list of user comments for the case.

comment string
created_at string · format: date-time
id string
owner enum

The application that owns the cases: Stack Management, Observability, or Elastic Security.

Values: cases observability securitySolution
pushed_at string · format: date-time nullable
type enum required
Values: user
updated_at string · format: date-time nullable
version string
page integer required

The current page index.

per_page integer required

The number of items per page.

total integer required

The total number of comments.