---
title: "Retrieves a list of comments for an incident."
method: GET
path: "/v1/{accountId}/incidents/{incidentId}/comments"
tags: ["Get Comments for a Specific Incident"]
---

# Retrieves a list of comments for an incident.

`GET /v1/{accountId}/incidents/{incidentId}/comments`

## Request

- Base URL: `https://api.usa.cloud.watchguard.com/rest/threatsync/management`
- URL: `https://api.usa.cloud.watchguard.com/rest/threatsync/management/v1/{accountId}/incidents/{incidentId}/comments`
- Auth: API key in header `WatchGuard-API-Key` and HTTP bearer
- TypeScript: <https://skmtc.dev/watchguard/apis/threatsync-management-api/docs/v1/:accountId/incidents/:incidentId/comments/get.ts> (a function with typed inputs; its response is checked against the schema)

Retrieves a list of comments for a specific incident.

## Path parameters

- `accountId` string, required
- `incidentId` string, required

## Query parameters

- `sortOrder` string
- `sortBy` string
- `fields` string
- `limit` integer
- `duration` string
- `startAfter` string
- `groupBy` string

## Response `200`

Successful response.

- FetchComments: Get comments for an incident.
  - `items` union[]: List of comments.
    - union
      - Comment: Create a comment for a specific incident.
        - `id` string: ID of a comment.
        - `incidentId` string: ID of an incident.
        - `account` string: Account ID.
        - `user` string: User name.
        - `comment` string: The comment added to the specified incident.
        - `creationTime` string: The time the comment was created.
      - union
        - Comment: Create a comment for a specific incident.
          - `id` string: ID of a comment.
          - `incidentId` string: ID of an incident.
          - `account` string: Account ID.
          - `user` string: User name.
          - `comment` string: The comment added to the specified incident.
          - `creationTime` string: The time the comment was created.
        - CommentWithActionTransition: Create a comment for a specific incident.
          - `id` string: ID of a comment.
          - `incidentId` string: ID of an incident.
          - `account` string: Account ID.
          - `user` string: User name.
          - `comment` string: The comment added to the specified incident.
          - `creationTime` string: The time the comment was created.
          - `command` string: The action that was created.
          - `actionId` string: ID of an Action.
          - `context` string: Context type whether an incident status is updated or a new action is created.
        - CommentWithIncidentTransition: Create a comment for a specific incident.
          - `id` string: ID of a comment.
          - `incidentId` string: ID of an incident.
          - `account` string: Account ID.
          - `user` string: User name.
          - `comment` string: The comment added to the specified incident.
          - `creationTime` string: The time the comment was created.
          - `newStatus` string: New incident status.
          - `context` string: Context type whether an incident status is updated or a new action is created.
        - object
          - `lastUpdateTime` string: Last updated time of the comment.
      - CommentWithIncidentTransition: Create a comment for a specific incident.
        - `id` string: ID of a comment.
        - `incidentId` string: ID of an incident.
        - `account` string: Account ID.
        - `user` string: User name.
        - `comment` string: The comment added to the specified incident.
        - `creationTime` string: The time the comment was created.
        - `newStatus` string: New incident status.
        - `context` string: Context type whether an incident status is updated or a new action is created.
      - CommentWithActionTransition: Create a comment for a specific incident.
        - `id` string: ID of a comment.
        - `incidentId` string: ID of an incident.
        - `account` string: Account ID.
        - `user` string: User name.
        - `comment` string: The comment added to the specified incident.
        - `creationTime` string: The time the comment was created.
        - `command` string: The action that was created.
        - `actionId` string: ID of an Action.
        - `context` string: Context type whether an incident status is updated or a new action is created.
  - `count` integer: Total count of actions.

## Other responses

- `default`: Error response.

---

[API](https://skmtc.dev/watchguard/apis/threatsync-management-api.md) - [All operations](https://skmtc.dev/watchguard/apis/threatsync-management-api/llms.txt) - [OpenAPI document](https://skmtc.dev/watchguard/apis/threatsync-management-api/revisions/2993b1908d27?raw)