cases
Lists security incidents with nested activity, child entries, and comments. Use filters and sorting to retrieve targeted data from the platform.
Instructions
List cases (with nested activity/children/comments connections). The OUTER list page size is first3 (set it to bound results, e.g. first3=25); first/first1/first2 page the nested connections. Variables: after, filter, first, order, after1, filter1, first1, order1, after2, filter2, first2, order2, after3, filter3, first3, order3. Example variables: {"after":"T18w","filter":{"created":{"earliest":"2026-05-01T00:00:00.000Z","latest":"2026-05-01T00:00:00.000Z"}},"first":10,"order":{"direction":"ASC","orderByList":["CREATED_AT"]},"after1":"T18w","filter1":{"assignees":[""],"created":{"earliest":"2026-05-01T00:00:00.000Z","latest":"2026... NOTE: discoverExposure is omitted from this query as a workaround for a GreyMatter server-side error; request it via graphql_query if you need it.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| after | No | GraphQL: String | |
| first | No | GraphQL: Int | |
| order | No | GraphQL: CaseActivityLogOrder | |
| after1 | No | GraphQL: String | |
| after2 | No | GraphQL: String | |
| after3 | No | GraphQL: String | |
| filter | No | GraphQL: CaseActivityLogFilter | |
| first1 | No | GraphQL: Int | |
| first2 | No | GraphQL: Int | |
| first3 | No | GraphQL: Int | |
| order1 | No | GraphQL: CaseChildOrder | |
| order2 | No | GraphQL: CaseCommentOrder | |
| order3 | No | GraphQL: CaseOrder | |
| filter1 | No | GraphQL: CaseChildFilter | |
| filter2 | No | GraphQL: CaseCommentFilter | |
| filter3 | No | GraphQL: CaseFilter | |
| customer_slug | No | Override the x-reliaquest-customer (OpCo) header. |