Method: legacyCases.createCase

Full name: projects.locations.instances.legacyCases.createCase

Ingests a package of cases into the system's data processing engine. This method is used by integrations and the API to bulk-load security alerts and event data.

HTTP request


POST https://chronicle.africa-south1.rep.googleapis.com/v1alpha/{name}/legacyCases:createCase

Path parameters

Parameters
name

string

Required. The resource name of the LegacyCase to retrieve. Format: projects/{project}/locations/{location}/instances/{instance}/LegacyCases

Request body

The request body contains data with the following structure:

JSON representation 
{
  "cases": [
    {
      object (LegacyCaseInfo)
    }
  ],
  "type": enum (CaseType)
}
Fields
cases[]

object (LegacyCaseInfo)

Required. Cases is a list of case information items.
type

enum (CaseType)

Optional. Type is the case type.

Response body

If successful, the response body is an empty JSON object.

Authorization scopes

Requires one of the following OAuth scopes:

  • https://www.googleapis.com/auth/cloud-platform
  • https://www.googleapis.com/auth/chronicle
  • https://www.googleapis.com/auth/chronicle.readonly

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the name resource:

  • chronicle.legacyCases.ingest

For more information, see the IAM documentation.