entry

Required user permissions

modules.cases.entry.**

[+] The exact create/read/edit/archive/delete node is narrowed by case type and resource ownership.

Subcommands

/entry is a group command. Choose one of the interactions below.

/entry add

Add text and an optional file to a case.

/entry add <case> <content> [file]

Arguments

case integer

Required

The case ID.

content string

Required

Entry text, up to 512 characters.

file attachment

Optional

A file to attach.

Example

Add an investigation note.

/entry add case:418 content:"Confirmed by audit log"

/entry edit

Replace an existing entry's content.

/entry edit <case> <entry> <content>

Arguments

case integer

Required

The case ID.

entry integer

Required

The entry ID.

content string

Required

Replacement content, up to 512 characters.

Example

Correct an entry.

/entry edit case:418 entry:3 content:"Corrected timeline"

/entry get

Inspect one entry in depth.

/entry get <case> <entry>

Arguments

case integer

Required

The case ID.

entry integer

Required

The entry ID.

Example

Open a specific entry.

/entry get case:418 entry:3

/entry archive

Soft-delete an entry while retaining its audit trail.

/entry archive <case> <entry> <reason>

Arguments

case integer

Required

The case ID.

entry integer

Required

The entry ID.

reason string

Required

Why the entry is being archived.

Example

Archive a duplicate entry.

/entry archive case:418 entry:3 reason:"Duplicate"

/entry delete

Permanently delete an entry.

/entry delete <case> <entry> <reason>

Arguments

case integer

Required

The case ID.

entry integer

Required

The entry ID.

reason string

Required

Why permanent deletion is required.

Example

Delete sensitive data entered by mistake.

/entry delete case:418 entry:3 reason:"Contained exposed credentials"