Unable to retrieve incident comments #1144
-
I need to retrieve incident comments via the API but have not been able to find the correct method in the API. Based on research, it seems that I need to query the following URLs. It will respond with
I then need to query the following URL to get the comment message. https://falcon.us-2.crowdstrike.com/api2/audit-logs/entities/audit-logs/v1?ids={comment_resource_id}
Appreciate if you could assist in letting me know the correct method in the API to make those queries. |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
Hi @limbenjamin - Thank you for the question! Read / update functionality for Incident comments is not currently available via the public API. You can submit a request for this to be added via the ideas portal link available from the Falcon console. |
Beta Was this translation helpful? Give feedback.
Hi @limbenjamin -
Thank you for the question!
Read / update functionality for Incident comments is not currently available via the public API. You can submit a request for this to be added via the ideas portal link available from the Falcon console.