Cases service
Manage cases throughout their lifecycle. Create, view, assign, acknowledge, unacknowledge, resolve, and close cases to streamline investigations and follow-ups.
Overview
The Cases service manages case entities in Coralogix, which track and correlate events across the system and, like alerts, can generate notifications through the Notification Center. The service supports the full case lifecycle, including retrieving and listing cases with filters and pagination, updating case fields, assigning and unassigning owners, acknowledging cases, resolving and closing cases, and overriding computed priority values. It also provides bulk operations for all major actions and exposes aggregation, filter, and grouping metadata to support UI workflows and case organization. Case entities progress through defined states, from created and active, to acknowledged, resolved, and closed, enabling structured investigation, ownership, and follow-up.
Acknowledge multiple cases
Mark multiple cases as acknowledged in a single operation.
Acknowledge a case
Mark the case as acknowledged by a user.
Unacknowledge a case
Remove the acknowledgment from a case.
Assign multiple cases to a user
Assign multiple cases to a specific user in a single operation.
Remove assignment from multiple cases
Remove the current assignee from multiple cases in a single operation.
Assign a case to a user
Assign a case to a specific user.
Remove case assignment
Remove the current assignee from a case.
List cases with filters
List cases using filters, pagination and custom ordering.
Get case deep links
Retrieve deep-link URLs for a case.
Get case by ID
Retrieve detailed information about a single case by its unique identifier.
Update case fields
Apply a partial update (patch) to a case.
Close multiple cases
Close multiple cases in a single operation.
Close a case
Close a case that no longer requires action.
Get available filter values
Retrieve available filter and aggregation values for cases.
Get available grouping keys
Retrieve all available grouping keys that can be used for organizing and filtering Cases.
Get case by indicator
Retrieve a case by its source indicator. Currently supports Prometheus AlertManager alerts identified by fingerprint and start time.
Override priority for multiple cases
Override the priority with for multiple cases in a single operation.
Remove priority override from multiple cases
Remove previously set priority overrides from multiple cases in a single operation.
Set priority override
Override a case's computed priority with a specific value.
Remove priority override
Remove a previously set priority override for a case.
Resolve multiple cases
Resolve multiple cases in a single operation.
Resolve a case
Mark a case as resolved.