REST Resource: projects.locations.instances.caseCloseDefinitions

Resource: CaseCloseDefinition

This service is available for customers who migrated SOAR to a customer managed project and have the Chronicle API enabled. Provides the customers the ability to create root causes upon case closure.

JSON representation 
{
  "name": string,
  "closeReason": enum (CloseReason),
  "rootCause": string
}
Fields
name

string

Identifier. The unique name(ID) of the CaseCloseDefinition. Format: projects/{project}/locations/{location}/instances/{instance}/caseCloseDefinitions/{caseCloseDefinition}
closeReason

enum (CloseReason)

Required. Specify why the case was closed.
rootCause

string

Required. Provides detailed description about the specific root cause option.

CloseReason

The reason for closing the case.

Enums
CLOSE_REASON_UNSPECIFIED Unspecified close reason.
MALICIOUS Malicious close reason.
NOT_MALICIOUS Not malicious close reason.
MAINTENANCE Maintenance close reason.
INCONCLUSIVE Inconclusive close reason.

Methods

create

 Creates a CaseCloseDefinition.

delete

 Deletes a CaseCloseDefinition.

get

 Gets a CaseCloseDefinition.

list

 Lists CaseCloseDefinitions.

patch

 Updates a CaseCloseDefinition.