Body Required

• agent_type string

  List of agent types to retrieve. Defaults to endpoint.

  Values are endpoint, sentinel_one, crowdstrike, or microsoft_defender_endpoint.

• alert_ids array[string]

  If this action is associated with any alerts, they can be specified here. The action will be logged in any cases associated with the specified alerts.

  At least 1 element. Minimum length of each is 1.

• case_ids array[string]

  The IDs of cases where the action taken will be logged.

  At least 1 element. Minimum length of each is 1.

• comment string

  Optional comment

• endpoint_ids array[string] Required

  List of endpoint IDs (cannot contain empty strings)

  At least 1 element. Minimum length of each is 1.

• parameters object Required

  Optional parameters object

  Hide parameters attribute Show parameters attribute object

  • path string Required