Add a note to an existing Timelineedit

Add a note to an existing Timeline or Timeline event.

The Kibana Console supports only Elasticsearch APIs. Console doesn’t allow interactions with Kibana APIs. You must use curl or another HTTP tool instead. For more information, refer to Console.

Request URLedit

PATCH <kibana host>:<port>/api/note

Request bodyedit

A JSON object defining the note content to be added.

Name Type Description Required

note

eventNote

A note added to a specific Timeline event

  • timelineId: The savedObjectId of an existing Timeline the note is linked to
  • eventId: Required if the note is linked to a specific Timeline event.
  • note: Note content

Yes

Example requestsedit

Example 1

Add a note to an existing Timeline event:

PATCH api/note
{
  "note":{
    "eventId":"dDaPFXkB-qWtr5vqlN9o",
    "note":"My note",
    "timelineId":"b2c103b0-a79d-11eb-9dce-0f3114099868"
  }
}

Example 2

Add a note to an existing Timeline:

PATCH api/note
{
  "note":{
    "note":"My note",
    "timelineId":"b2c103b0-a79d-11eb-9dce-0f3114099868"
  }
}