Search skmtc
⌘K
Docs
Sign in
Docs
History
Schema
Generate
Filter operations
agent builder
44
alerting
23
alerting-v2
50
APM agent configuration
7
APM agent keys
1
APM annotations
2
APM server schema
1
APM sourcemaps
3
cases
34
post
/api/cases
Create a case
delete
/api/cases
Delete cases
patch
/api/cases
Update cases
get
/api/cases/_find
Search cases
get
/api/cases/{caseId}
Get case information
get
/api/cases/{caseId}/alerts
Get all alerts for a case
post
/api/cases/{caseId}/comments
Add a case comment or alert
delete
/api/cases/{caseId}/comments
Delete all case comments and alerts
patch
/api/cases/{caseId}/comments
Update a case comment or alert
get
/api/cases/{caseId}/comments/_find
Find case comments
get
/api/cases/{caseId}/comments/{commentId}
Get a case comment or alert
delete
/api/cases/{caseId}/comments/{commentId}
Delete a case comment or alert
post
/api/cases/{caseId}/connector/{connectorId}/_push
Push a case to an external service
get
/api/cases/{caseId}/fields
Get the fields applicable to an existing case
post
/api/cases/{caseId}/files
Attach a file to a case
get
/api/cases/{caseId}/user_actions/_find
Find case activity
get
/api/cases/alerts/{alertId}
Get cases for an alert
get
/api/cases/configure
Get case settings
post
/api/cases/configure
Add case settings
patch
/api/cases/configure/{configurationId}
Update case settings
get
/api/cases/configure/connectors/_find
Get case connectors
get
/api/cases/field_definitions
Get all field definitions
post
/api/cases/field_definitions
Create a field definition
get
/api/cases/field_definitions/{field_definition_id}
Get a field definition by ID
put
/api/cases/field_definitions/{field_definition_id}
Update a field definition
delete
/api/cases/field_definitions/{field_definition_id}
Delete a field definition
get
/api/cases/fields
Get the fields applicable to a case
get
/api/cases/reporters
Get case creators
get
/api/cases/tags
Get case tags
get
/api/cases/templates
Get all case templates
post
/api/cases/templates
Create a case template
get
/api/cases/templates/{template_id}
Get a case template by ID
put
/api/cases/templates/{template_id}
Update a case template
delete
/api/cases/templates/{template_id}
Delete a case template
connectors
11
context engine
7
Dashboards
5
Data streams
3
data views
15
data-views-v2
5
Discover sessions
5
Elastic Agent actions
18
Elastic Agent binary download sources
5
Elastic Agent policies
14
Elastic Agent status
1
Elastic Agents
18
Elastic Package Manager (EPM)
36
Fleet agentless policies
7
Fleet cloud connectors
6
Fleet cloud onboarding deployments
5
Fleet enrollment API keys
5
Fleet internals
7
Fleet managed integrations
7
Fleet outputs
7
Fleet package policies
9
Fleet proxies
5
Fleet remote synced integrations
2
Fleet Server hosts
5
Fleet service tokens
1
Fleet uninstall tokens
3
Links
5
logstash
4
maintenance-window
7
Markdowns
5
Message Signing Service
1
ml
3
observability_ai_assistant
1
roles
5
saved objects
16
Security AI Assistant API
21
Security Attack discovery API
16
Security Detections API
29
Security Endpoint Exceptions API
6
Security Endpoint Management API
29
Security Entity Analytics API
29
Security entity store
19
Security Exceptions API
16
Security Lists API
18
Security Osquery API
21
Security Solution Initialization API
1
Security Timeline API
17
short url
4
slo
15
spaces
9
streams
18
synthetics
20
system
2
Tags
5
task manager
1
Universal Profiling
2
upgrade
1
uptime
2
user session
1
Visualizations
5
workflows
32
post
/api/security/role/_query
Query roles
post
/api/spaces/_resolve_copy_saved_objects_errors
Resolve conflicts copying saved objects
cases
Copy
Copy Markdown
Copy Markdown
Copying…
Copied
Copy failed
Changes to Update a case template
put
/api/cases/templates/{template_id}
Aug 6, 2026
fb023e117b5c
Revision changes
info
endpoint added