mirror of
https://github.com/elastic/kibana.git
synced 2025-04-24 01:38:56 -04:00
[DOCS] Clarify case duration (#133552)
Co-authored-by: Eric Davis <eric.davis@elastic.co>
This commit is contained in:
parent
b1d9e76eb6
commit
9ca93a552c
5 changed files with 42 additions and 22 deletions
|
@ -124,7 +124,7 @@ The API returns a JSON object listing the retrieved cases. For example:
|
|||
"description": "Case description",
|
||||
"settings": { "syncAlerts": true },
|
||||
"owner": "securitySolution",
|
||||
"duration": null,
|
||||
"duration": null, <1>
|
||||
"severity": "low",
|
||||
"closed_at": null,
|
||||
"closed_by": null,
|
||||
|
@ -155,3 +155,7 @@ The API returns a JSON object listing the retrieved cases. For example:
|
|||
"count_closed_cases": 0
|
||||
}
|
||||
--------------------------------------------------
|
||||
<1> Duration represents the elapsed time from the creation of the case to its
|
||||
closure (in seconds). If the case has not been closed, the duration is set to
|
||||
`null`. If the case was closed after less than half a second, the duration is
|
||||
rounded down to zero.
|
|
@ -92,11 +92,15 @@ The API returns a JSON object with the retrieved case. For example:
|
|||
},
|
||||
"owner": "securitySolution",
|
||||
"severity": "low",
|
||||
"duration": null,
|
||||
"duration": null, <1>
|
||||
"tags": [
|
||||
"phishing",
|
||||
"social engineering",
|
||||
"bubblegum"
|
||||
]
|
||||
}
|
||||
--------------------------------------------------
|
||||
--------------------------------------------------
|
||||
<1> Duration represents the elapsed time from the creation of the case to its
|
||||
closure (in seconds). If the case has not been closed, the duration is set to
|
||||
`null`. If the case was closed after less than half a second, the duration is
|
||||
rounded down to zero.
|
|
@ -346,7 +346,7 @@
|
|||
},
|
||||
"duration": {
|
||||
"type": "integer",
|
||||
"description": "The elapsed time from the creation of the case to its closure (in seconds). If the case has not been closed, the duration is set to null.",
|
||||
"description": "The elapsed time from the creation of the case to its closure (in seconds). If the case has not been closed, the duration is set to null. If the case was closed after less than half a second, the duration is rounded down to zero.\n",
|
||||
"example": 120
|
||||
},
|
||||
"external_service": {
|
||||
|
@ -837,7 +837,7 @@
|
|||
},
|
||||
"duration": {
|
||||
"type": "integer",
|
||||
"description": "The elapsed time from the creation of the case to its closure (in seconds). If the case has not been closed, the duration is set to null.",
|
||||
"description": "The elapsed time from the creation of the case to its closure (in seconds). If the case has not been closed, the duration is set to null. If the case was closed after less than half a second, the duration is rounded down to zero.\n",
|
||||
"example": 120
|
||||
},
|
||||
"external_service": {
|
||||
|
@ -1315,7 +1315,7 @@
|
|||
},
|
||||
"duration": {
|
||||
"type": "integer",
|
||||
"description": "The elapsed time from the creation of the case to its closure (in seconds). If the case has not been closed, the duration is set to null.",
|
||||
"description": "The elapsed time from the creation of the case to its closure (in seconds). If the case has not been closed, the duration is set to null. If the case was closed after less than half a second, the duration is rounded down to zero.\n",
|
||||
"example": 120
|
||||
},
|
||||
"external_service": {
|
||||
|
@ -2740,7 +2740,7 @@
|
|||
},
|
||||
"duration": {
|
||||
"type": "integer",
|
||||
"description": "The elapsed time from the creation of the case to its closure (in seconds). If the case has not been closed, the duration is set to null.",
|
||||
"description": "The elapsed time from the creation of the case to its closure (in seconds). If the case has not been closed, the duration is set to null. If the case was closed after less than half a second, the duration is rounded down to zero.\n",
|
||||
"example": 120
|
||||
},
|
||||
"external_service": {
|
||||
|
@ -3237,7 +3237,7 @@
|
|||
},
|
||||
"duration": {
|
||||
"type": "integer",
|
||||
"description": "The elapsed time from the creation of the case to its closure (in seconds). If the case has not been closed, the duration is set to null.",
|
||||
"description": "The elapsed time from the creation of the case to its closure (in seconds). If the case has not been closed, the duration is set to null. If the case was closed after less than half a second, the duration is rounded down to zero.\n",
|
||||
"example": 120
|
||||
},
|
||||
"external_service": {
|
||||
|
@ -3716,7 +3716,7 @@
|
|||
},
|
||||
"duration": {
|
||||
"type": "integer",
|
||||
"description": "The elapsed time from the creation of the case to its closure (in seconds). If the case has not been closed, the duration is set to null.",
|
||||
"description": "The elapsed time from the creation of the case to its closure (in seconds). If the case has not been closed, the duration is set to null. If the case was closed after less than half a second, the duration is rounded down to zero.\n",
|
||||
"example": 120
|
||||
},
|
||||
"external_service": {
|
||||
|
|
|
@ -323,10 +323,11 @@ paths:
|
|||
bubblegum is now active
|
||||
duration:
|
||||
type: integer
|
||||
description: >-
|
||||
description: >
|
||||
The elapsed time from the creation of the case to its
|
||||
closure (in seconds). If the case has not been closed, the
|
||||
duration is set to null.
|
||||
duration is set to null. If the case was closed after less
|
||||
than half a second, the duration is rounded down to zero.
|
||||
example: 120
|
||||
external_service:
|
||||
type: object
|
||||
|
@ -749,10 +750,11 @@ paths:
|
|||
bubblegum is now active
|
||||
duration:
|
||||
type: integer
|
||||
description: >-
|
||||
description: >
|
||||
The elapsed time from the creation of the case to its
|
||||
closure (in seconds). If the case has not been closed, the
|
||||
duration is set to null.
|
||||
duration is set to null. If the case was closed after less
|
||||
than half a second, the duration is rounded down to zero.
|
||||
example: 120
|
||||
external_service:
|
||||
type: object
|
||||
|
@ -1128,10 +1130,12 @@ paths:
|
|||
Repeat - operation bubblegum is now active
|
||||
duration:
|
||||
type: integer
|
||||
description: >-
|
||||
description: >
|
||||
The elapsed time from the creation of the case to
|
||||
its closure (in seconds). If the case has not been
|
||||
closed, the duration is set to null.
|
||||
closed, the duration is set to null. If the case was
|
||||
closed after less than half a second, the duration
|
||||
is rounded down to zero.
|
||||
example: 120
|
||||
external_service:
|
||||
type: object
|
||||
|
@ -2389,10 +2393,11 @@ paths:
|
|||
bubblegum is now active
|
||||
duration:
|
||||
type: integer
|
||||
description: >-
|
||||
description: >
|
||||
The elapsed time from the creation of the case to its
|
||||
closure (in seconds). If the case has not been closed, the
|
||||
duration is set to null.
|
||||
duration is set to null. If the case was closed after less
|
||||
than half a second, the duration is rounded down to zero.
|
||||
example: 120
|
||||
external_service:
|
||||
type: object
|
||||
|
@ -2817,10 +2822,11 @@ paths:
|
|||
bubblegum is now active
|
||||
duration:
|
||||
type: integer
|
||||
description: >-
|
||||
description: >
|
||||
The elapsed time from the creation of the case to its
|
||||
closure (in seconds). If the case has not been closed, the
|
||||
duration is set to null.
|
||||
duration is set to null. If the case was closed after less
|
||||
than half a second, the duration is rounded down to zero.
|
||||
example: 120
|
||||
external_service:
|
||||
type: object
|
||||
|
@ -3199,10 +3205,12 @@ paths:
|
|||
Repeat - operation bubblegum is now active
|
||||
duration:
|
||||
type: integer
|
||||
description: >-
|
||||
description: >
|
||||
The elapsed time from the creation of the case to
|
||||
its closure (in seconds). If the case has not been
|
||||
closed, the duration is set to null.
|
||||
closed, the duration is set to null. If the case was
|
||||
closed after less than half a second, the duration
|
||||
is rounded down to zero.
|
||||
example: 120
|
||||
external_service:
|
||||
type: object
|
||||
|
|
|
@ -44,7 +44,11 @@ description:
|
|||
example: "James Bond clicked on a highly suspicious email banner advertising cheap holidays for underpaid civil servants. Operation bubblegum is active. Repeat - operation bubblegum is now active"
|
||||
duration:
|
||||
type: integer
|
||||
description: The elapsed time from the creation of the case to its closure (in seconds). If the case has not been closed, the duration is set to null.
|
||||
description: >
|
||||
The elapsed time from the creation of the case to its closure (in seconds).
|
||||
If the case has not been closed, the duration is set to null. If the case
|
||||
was closed after less than half a second, the duration is rounded down to
|
||||
zero.
|
||||
example: 120
|
||||
external_service:
|
||||
type: object
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue