REST Resource: projects.locations.instances.caseCloseDefinitions

Resource: CaseCloseDefinition

This service is available for customers who migrated SOAR to a customer managed project and have the Chronicle API enabled. Provides the customers the ability to create root causes upon case closure.

JSON representation 
{
  "name": string,
  "closeReason": enum (CloseReason),
  "rootCause": string
}
Fields
name

string

Identifier. The unique name(ID) of the CaseCloseDefinition. Format: projects/{project}/locations/{location}/instances/{instance}/caseCloseDefinitions/{caseCloseDefinition}
closeReason

enum (CloseReason)

Required. Specify why the case was closed.
rootCause

string

Required. Provides detailed description about the specific root cause option.

CloseReason

The reason for closing the case.

Enums
CLOSE_REASON_UNSPECIFIED Unspecified close reason.
MALICIOUS Malicious close reason.
NOT_MALICIOUS Not malicious close reason.
MAINTENANCE Maintenance close reason.
INCONCLUSIVE Inconclusive close reason.

Methods

create

 Creates a new CaseCloseDefinition.

delete

 Deletes a CaseCloseDefinition.

get

 Gets a single CaseCloseDefinition by its resource name.

list

 Lists all CaseCloseDefinitions.

patch

 Updates an existing CaseCloseDefinition.