API Reference

Update case details (DEPRECATED)

post
https://api.us-west.exabeam.cloud/threat-center/v1/cases/

Update details for a specific case, as identified by case ID. Modify field values such as alertName, alertDescription, stage, closedReason, queue, assignee, priority, tags.

Note: This endpoint is deprecated. The new endpoint /threat-center/v2/cases/{caseId}` performs validations for the closedReason values.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Path Params
uuid
required

Unique ID that identifies a case.

Body Params
string
length ≤ 1024

Alert description in either plaintext or HTML format. For example Suspicious Activity (plaintext) or <strong>Suspicious Activity</strong> (HTML). If HTML formatting is used, it will also be reflected in the Threat Center web interface.

string
length ≤ 128

Alert name.

string
enum

Alert priority.

Allowed:
tags
array of strings

Tags to group cases.

tags
string

Case stage.

string

Provide a brief reason that describes why a case was closed (stage is set to CLOSED). The case closed reason can be either plaintext or HTML format. For example False Positive (plaintext) or <strong>False Positive</strong> (HTML). If HTML formatting is used, it will also be reflected in the Threat Center web interface.

string

Assignee for the case.

string

Queue for the case.

Responses

Updated 23 days ago

Language
Credentials
OAuth2
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json

Updated 23 days ago