A newer version is available. For the latest information, see the current release documentation.
« Get all case activity Get reporters »
Elastic Docs ›Elastic Security Solution [7.17] ›Elastic Security APIs ›Cases API

Get tags

edit

Get tags

edit

Aggregates and returns all unique tags from all cases.

Console supports only Elasticsearch APIs. Console doesn’t allow interactions with Kibana APIs. You must use curl or another HTTP tool instead. For more information, refer to Run Elasticsearch API requests.

Request URL

edit

GET <kibana host>:<port>/api/cases/tags

URL query parameters

edit
Name Type Description Required

owner

String or String[]

A filter to limit the retrieved tags to a specific set of applications. If this parameter is omitted, the response will contain all tags that the user has access to read.

No

Example request

edit

Gets all tags for all cases:

GET api/cases/tags

Response code

edit
200
Indicates a successful call.

Example response

edit
[
  "windows",
  "phishing",
  "social engineering",
  "bubblegum"
]
« Get all case activity Get reporters »