finding_cases

Creates, updates, deletes, gets or lists a finding_cases resource.

Overview

Name	finding_cases
Type	Resource
Id	datadog.security.finding_cases

Fields

The following fields are returned by SELECT queries:

SELECT not supported for this resource, use SHOW METHODS to view available operations for the resource.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
create_cases	insert	data		Create cases for security findings.<br />You can create up to 50 cases per request and associate up to 50 security findings per case. Security findings that are already attached to another case will be detached from their previous case and attached to the newly created case.
attach_case	update	case_id		Attach security findings to a case.<br />You can attach up to 50 security findings per case. Security findings that are already attached to another case will be detached from their previous case and attached to the specified case.
detach_case	delete			Detach security findings from their case.<br />This operation dissociates security findings from their associated cases without deleting the cases themselves. You can detach security findings from multiple different cases in a single request, with a limit of 50 security findings per request. Security findings that are not currently attached to any case will be ignored.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
case_id	string	Unique identifier of the case to attach security findings to
site	string	The Datadog site (region) for your organization, for example datadoghq.com, us3.datadoghq.com, us5.datadoghq.com, ap1.datadoghq.com, ap2.datadoghq.com, datadoghq.eu, ddog-gov.com. Resolved from the DD_SITE environment variable when set. Optional: defaults to datadoghq.com, or the value of the DD_SITE environment variable when set; a WHERE value overrides both.

INSERT examples

create_cases

Create cases for security findings.<br />You can create up to 50 cases per request and associate up to 50 security findings per case. Security findings that are already attached to another case will be detached from their previous case and attached to the newly created case.

INSERT INTO datadog.security.finding_cases (
data
)
SELECT 
'{{ data }}' /* required */
RETURNING
data
;

Manifest

# Description fields are for documentation purposes
- name: finding_cases
props:
  - name: data
    description: |
      Array of case creation request data objects.
    value:
      - attributes:
          assignee_id: "{{ assignee_id }}"
          description: "{{ description }}"
          priority: "{{ priority }}"
          title: "{{ title }}"
        relationships:
          findings:
            data:
              - id: "{{ id }}"
                type: "{{ type }}"
          project:
            data:
              id: "{{ id }}"
              type: "{{ type }}"
        type: "{{ type }}"

UPDATE examples

attach_case

Attach security findings to a case.<br />You can attach up to 50 security findings per case. Security findings that are already attached to another case will be detached from their previous case and attached to the specified case.

UPDATE datadog.security.finding_cases
SET 
data = '{{ data }}'
WHERE 
case_id = '{{ case_id }}' --required
RETURNING
data;

DELETE examples

detach_case

Detach security findings from their case.<br />This operation dissociates security findings from their associated cases without deleting the cases themselves. You can detach security findings from multiple different cases in a single request, with a limit of 50 security findings per request. Security findings that are not currently attached to any case will be ignored.

DELETE FROM datadog.security.finding_cases
;