Get a case comment or alert

Base URL: https://{kibana_url}

GET /api/cases/{caseId}/comments/{commentId}
GET /s/{space_id}/api/cases/{caseId}/comments/{commentId}

Auth

You must have read privileges for the Cases feature in the Management, Observability, or Security section of the Kibana feature privileges, depending on the owner of the cases with the comments you're seeking.

Path parameters

space_id string optional: An identifier for the space. If space_id is not provided in the URL, the default space is used. Refer to Spaces for more information.
caseId string required: The identifier for the case. To retrieve case IDs, use the find cases API. All non-ASCII characters must be URL encoded.; Example: 9c235210-6834-11ea-a78c-6ffb38a34414
commentId string required: The identifier for the comment. To retrieve comment IDs, use the get case or find cases APIs.; Example: 71ec1870-725b-11ea-a0b2-c51ea50a58e2

Responses

Indicates a successful call.

application/json

One of:

type enum required: Values: alert
alertId string[]
created_at string · format: date-time
created_by object
id string
index string[]
owner enum: The application that owns the cases: Stack Management, Observability, or Elastic Security.; Values: cases observability securitySolution
pushed_at string · format: date-time nullable
pushed_by object nullable
rule object
updated_at string · format: date-time nullable
updated_by object nullable
version string

Authorization information is missing or invalid.

application/json