Provides the analysis and timeline details of a case.

External Documentation

To learn more, visit the Abnormal documentation.

​
Parameters

ParameterDescription
Case IDThe ID representing the case. Can be retrieved from the ‘List Cases’ action.

​
Example Output

{
	"insights": [
		{
			"signal": "<string>",
			"description": "<string>"
		},
		{
			"signal": "<string>",
			"description": "<string>"
		}
	],
	"eventTimeline": [
		{
			"event_timestamp": "<string>",
			"category": "<string>",
			"title": "<string>",
			"platform": "<string>",
			"field_labels": {},
			"ip_address": "<string>",
			"location": {
				"city": "<string>",
				"state": "<string>",
				"country": "<string>"
			}
		},
		{
			"event_timestamp": "<string>",
			"category": "<string>",
			"title": "<string>",
			"platform": "<string>",
			"field_labels": {},
			"ip_address": "<string>",
			"location": {
				"city": "<string>",
				"state": "<string>",
				"country": "<string>"
			}
		}
	]
}

​
Workflow Library Example

Get Case Analysis with Abnormal and Send Results Via Email

Preview this Workflow on desktop