Tool to retrieve a list of cases in Kibana. Use when you need to find or list existing security or operational cases, potentially filtering by various attributes like status, assignee, or severity.
tostringReturns cases created before a specific date. Must be specified as a KQL date range or date match expression.
fromstringReturns cases created after a specific date. Must be specified as a KQL date range or date match expression.
pageintegerThe page number of objects to return.
tagsFilters cases by tags.
ownerFilters cases by owner. Valid values are `cases`, `observability`, and `securitySolution`.
searchstringFilters response objects using an Elasticsearch `simple_query_string` query.
statusstringFilters cases by status.
perPageintegerThe number of objects to return per page.
severitystringFilters cases by severity.
assigneesFilters the returned cases by assignees. Valid values are `none` or unique identifiers for the user profiles.
reportersFilters cases by reporters' usernames.
sortFieldstringDetermines which field to sort results by.
dataRequiredData from the action execution
errorstringError if any occurred during the execution of the action
successfulRequiredbooleanWhether or not the action execution was successful or not
API key connection. Risk level 2 of 5.
Free Action
No published Skills explicitly reference this Action yet.