Note For long-text fields (e.g., Summary), the returned value will be a substring of the full content. To obtain the complete value, retrieve the entire case.

Note Workflows based on this trigger will search for new events every minute.

​
Sample Event

{
	"case_record": {
		"alert_ids": null,
		"attachment_ids": null,
		"auto_id": 1,
		"case_id": "INC-00001",
		"case_ids": null,
		"case_manager": null,
		"case_tags": null,
		"close_reason": null,
		"closed_at": null,
		"closed_by": null,
		"closed_by_automation": false,
		"collaborators": null,
		"created_at": 1732194432630,
		"created_by": "test@blinkops.com",
		"id": "bb2a5fcc-423b-4536-8b7a-63a547216579",
		"observable_ids": null,
		"mitre_attack": null,
		"name": "New Case",
		"observable_ids": null,
		"overview": null,
		"severity": 1,
		"sla": null,
		"sla_expiry": null,
		"status": "OPEN",
		"summary": null,
		"task_ids": null,
		"type": null,
		"updated_at": 1732194441640,
		"updated_by": "test@blinkops.com",
		"vendors": null
	},
	"linked_record": {
		"alert_ids": null,
		"assigned_to": null,
		"attachment_ids": null,
		"auto_id": 1,
		"case_ids": null,
		"closed_at": null,
		"created_at": 1708250747614,
		"created_by": "test@blinkops.com",
		"description": null,
		"due_date": null,
		"id": "a4be5ac6-399f-4b0c-b04e-ed323148c5de",
		"is_blocking": false,
		"name": "New Task",
		"observable_ids": null,
		"priority": 1,
		"task_id": "Task-00001",
		"status": "OPEN",
		"task_ids": null,
		"updated_at": 1732194441640,
		"updated_by": "test@blinkops.com"
	},
	"linked_record_table_name": "tasks"
}