case
Query and retrieve security investigation records, including activity logs, comments, and related data, with filtering and pagination.
Instructions
Cases · query case. Variables: after, filter, first, order, after1, filter1, first1, order1, after2, filter2, first2, order2, after3, filter3, first3, order3, after4, filter4, first4, order4, after5, filter5, first5, order5, after6, first6, after7, first7, after10, filter6, first10, order6, after11, filter7, first11, order7, after12, filter8, first12, order8, after13, filter9, first13, order9, after14, filter10, first14, order10, after15, filter11, first15, order11, by. Example variables: {"after":"T18w","filter":{"created":{"earliest":"2026-05-01T00:00:00.000Z","latest":"2026-05-01T00:00:00.000Z"}},"first":10,"order":{"direction":"ASC","orderByList":["CREATED_AT"]},"after1":"T18w","filter1":{"assignees":[""],"created":{"earliest":"2026-05-01T00:00:00.000Z","latest":"2026... NOTE: discoverExposure is omitted from this query as a workaround for a GreyMatter server-side error; request it via graphql_query if you need it.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| by | Yes | GraphQL: CaseBy! | |
| after | No | GraphQL: String | |
| first | No | GraphQL: Int | |
| order | No | GraphQL: CaseActivityLogOrder | |
| after1 | No | GraphQL: String | |
| after2 | No | GraphQL: String | |
| after3 | No | GraphQL: String | |
| after4 | No | GraphQL: String | |
| after5 | No | GraphQL: String | |
| after6 | No | GraphQL: String | |
| after7 | No | GraphQL: String | |
| filter | No | GraphQL: CaseActivityLogFilter | |
| first1 | No | GraphQL: Int | |
| first2 | No | GraphQL: Int | |
| first3 | No | GraphQL: Int | |
| first4 | No | GraphQL: Int | |
| first5 | No | GraphQL: Int | |
| first6 | No | GraphQL: Int | |
| first7 | No | GraphQL: Int | |
| order1 | No | GraphQL: CaseChildOrder | |
| order2 | No | GraphQL: CaseCommentOrder | |
| order3 | No | GraphQL: AccessGroupOrder | |
| order4 | No | GraphQL: PodOrder | |
| order5 | No | GraphQL: RoleOrder | |
| order6 | No | GraphQL: AccessGroupOrder | |
| order7 | No | GraphQL: PodOrder | |
| order8 | No | GraphQL: RoleOrder | |
| order9 | No | GraphQL: AccessGroupOrder | |
| after10 | No | GraphQL: String | |
| after11 | No | GraphQL: String | |
| after12 | No | GraphQL: String | |
| after13 | No | GraphQL: String | |
| after14 | No | GraphQL: String | |
| after15 | No | GraphQL: String | |
| filter1 | No | GraphQL: CaseChildFilter | |
| filter2 | No | GraphQL: CaseCommentFilter | |
| filter3 | No | GraphQL: AccessGroupFilter | |
| filter4 | No | GraphQL: PodFilter | |
| filter5 | No | GraphQL: RoleFilter | |
| filter6 | No | GraphQL: AccessGroupFilter | |
| filter7 | No | GraphQL: PodFilter | |
| filter8 | No | GraphQL: RoleFilter | |
| filter9 | No | GraphQL: AccessGroupFilter | |
| first10 | No | GraphQL: Int | |
| first11 | No | GraphQL: Int | |
| first12 | No | GraphQL: Int | |
| first13 | No | GraphQL: Int | |
| first14 | No | GraphQL: Int | |
| first15 | No | GraphQL: Int | |
| order10 | No | GraphQL: PodOrder | |
| order11 | No | GraphQL: RoleOrder | |
| filter10 | No | GraphQL: PodFilter | |
| filter11 | No | GraphQL: RoleFilter | |
| customer_slug | No | Override the x-reliaquest-customer (OpCo) header. |