LegacyCaseSearchEverythingResponse

Response for LegacyCaseSearchEverything.

JSON representation 
{
  "results": [
    {
      object (LegacyCaseSearchEverythingResult)
    }
  ],
  "totalCount": integer,
  "pageNumber": integer,
  "pageSize": integer,
  "nextPageToken": string
}
Fields
results[]

object (LegacyCaseSearchEverythingResult)

Optional. List of cases results.
totalCount

integer

Optional. Total count of cases.
pageNumber

integer

Optional. Page number.
pageSize

integer

Optional. Page size.
nextPageToken

string

Optional. A token, which can be sent as pageToken to retrieve the next page. If this field is omitted, there are no subsequent pages.

LegacyCaseSearchEverythingResult

Message that represents a case result.

JSON representation 
{
  "id": string,
  "title": string,
  "time": string,
  "closingTime": string,
  "tags": [
    string
  ],
  "products": [
    string
  ],
  "alertNames": [
    string
  ],
  "ticketIds": [
    string
  ],
  "eventNames": [
    string
  ],
  "sources": [
    {
      object (LegacyEntityKey)
    }
  ],
  "destinations": [
    {
      object (LegacyEntityKey)
    }
  ],
  "artificats": [
    {
      object (LegacyEntityKey)
    }
  ],
  "ports": [
    string
  ],
  "outcomes": [
    string
  ],
  "userAssigned": string,
  "status": string,
  "environment": string,
  "priority": enum (CasePriority),
  "stage": string,
  "closeReason": enum (CloseReasonEnum),
  "rootCause": string,
  "alertsCount": integer,
  "isImportant": boolean,
  "isIncident": boolean,
  "involvedSuspiciousEntity": boolean,
  "isCaseClosed": boolean
}
Fields
id

string (int64 format)

Optional. The case ID.
title

string

Optional. The case title.
time

string (Timestamp format)

Optional. The case time.

Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
closingTime

string (Timestamp format)

Optional. The case closing time.

Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
tags[]

string

Optional. The case tags.
products[]

string

Optional. The case products.
alertNames[]

string

Optional. The case alert names.
ticketIds[]

string

Optional. The case ticket IDs.
eventNames[]

string

Optional. The case event names.
sources[]

object (LegacyEntityKey)

Optional. The case sources.
destinations[]

object (LegacyEntityKey)

Optional. The case destinations.
artificats[]

object (LegacyEntityKey)

Optional. The case artifacts.
ports[]

string

Optional. The case ports.
outcomes[]

string

Optional. The case outcomes.
userAssigned

string

Optional. The case assigned user.
status

string

Optional. The case status.
environment

string

Optional. The case environment.
priority

enum (CasePriority)

Optional. The case priority.
stage

string

Optional. The case stage.
closeReason

enum (CloseReasonEnum)

Optional. The case close reason.
rootCause

string

Optional. The case root cause.
alertsCount

integer

Optional. The case alerts count.
isImportant

boolean

Optional. The case is important.
isIncident

boolean

Optional. The case is incident.
involvedSuspiciousEntity

boolean

Optional. The case involved suspicious entity.
isCaseClosed

boolean

Optional. The case is closed.

LegacyEntityKey

Message that represents an entity key.

JSON representation 
{
  "identifier": string,
  "type": string
}
Fields
identifier

string

Optional. The entity identifier.
type

string

Optional. The entity type.

CasePriority

Enum that represents the case priority

Enums
UNCHANGED Unspecified case priority.
INFORMATIVE Informative case priority.
LOW Low case priority.
MEDIUM Medium case priority.
HIGH High case priority.
CRITICAL Critical case priority.

CloseReasonEnum

Enum that represents the case close reason

Enums
MALICIOUS Malicious close reason.
NOT_MALICIOUS Not malicious close reason.
MAINTENANCE Maintenance close reason.
INCONCLUSIVE Inconclusive close reason.
UNKNOWN Unknown close reason.