Response for LegacyCaseSearchEverything.
| JSON representation |
|---|
{
"results"
:
[
{
object (
|
| Fields | |
|---|---|
results[]
|
Optional. List of cases results. |
totalCount
|
Optional. Total count of cases. |
pageNumber
|
Optional. Page number. |
pageSize
|
Optional. Page size. |
nextPageToken
|
Optional. A token, which can be sent as |
LegacyCaseSearchEverythingResult
Message that represents a case result.
| JSON representation |
|---|
{ "id" : string , "title" : string , "time" : string , "closingTime" : string , "tags" : [ string ] , "products" : [ string ] , "alertNames" : [ string ] , "ticketIds" : [ string ] , "eventNames" : [ string ] , "sources" : [ { object ( |
| Fields | |
|---|---|
id
|
Optional. The case ID. |
title
|
Optional. The case title. |
time
|
Optional. The case time. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: |
closingTime
|
Optional. The case closing time. Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: |
tags[]
|
Optional. The case tags. |
products[]
|
Optional. The case products. |
alertNames[]
|
Optional. The case alert names. |
ticketIds[]
|
Optional. The case ticket IDs. |
eventNames[]
|
Optional. The case event names. |
sources[]
|
Optional. The case sources. |
destinations[]
|
Optional. The case destinations. |
artificats[]
|
Optional. The case artifacts. |
ports[]
|
Optional. The case ports. |
outcomes[]
|
Optional. The case outcomes. |
userAssigned
|
Optional. The case assigned user. |
status
|
Optional. The case status. |
environment
|
Optional. The case environment. |
priority
|
Optional. The case priority. |
stage
|
Optional. The case stage. |
closeReason
|
Optional. The case close reason. |
rootCause
|
Optional. The case root cause. |
alertsCount
|
Optional. The case alerts count. |
isImportant
|
Optional. The case is important. |
isIncident
|
Optional. The case is incident. |
involvedSuspiciousEntity
|
Optional. The case involved suspicious entity. |
isCaseClosed
|
Optional. The case is closed. |
LegacyEntityKey
Message that represents an entity key.
| JSON representation |
|---|
{ "identifier" : string , "type" : string } |
| Fields | |
|---|---|
identifier
|
Optional. The entity identifier. |
type
|
Optional. The entity type. |
CasePriority
Enum that represents the case priority
| Enums | |
|---|---|
UNCHANGED
|
Unspecified case priority. |
INFORMATIVE
|
Informative case priority. |
LOW
|
Low case priority. |
MEDIUM
|
Medium case priority. |
HIGH
|
High case priority. |
CRITICAL
|
Critical case priority. |
CloseReasonEnum
Enum that represents the case close reason
| Enums | |
|---|---|
MALICIOUS
|
Malicious close reason. |
NOT_MALICIOUS
|
Not malicious close reason. |
MAINTENANCE
|
Maintenance close reason. |
INCONCLUSIVE
|
Inconclusive close reason. |
UNKNOWN
|
Unknown close reason. |

