Add a note to an existing Timeline | Elastic Security Solution [8.13]

› › ›

Add a note to an existing Timelineedit

Add a note to an existing Timeline or Timeline event.

PATCH <kibana host>:<port>/api/note

A JSON object defining the note content to be added.

Name	Type	Description	Required
`note`	eventNote	A note added to a specific Timeline event `timelineId`: The `savedObjectId` of an existing Timeline the note is linked to `eventId`: Required if the note is linked to a specific Timeline event. `note`: Note content	Yes

Example 1

Add a note to an existing Timeline event:

PATCH api/note
{
  "note":{
    "eventId":"dDaPFXkB-qWtr5vqlN9o",
    "note":"My note",
    "timelineId":"b2c103b0-a79d-11eb-9dce-0f3114099868"
  }
}

Example 2

Add a note to an existing Timeline:

PATCH api/note
{
  "note":{
    "note":"My note",
    "timelineId":"b2c103b0-a79d-11eb-9dce-0f3114099868"
  }
}