{"id":4915,"date":"2025-10-10T08:00:00","date_gmt":"2025-10-10T05:00:00","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=changelog&#038;p=4915"},"modified":"2026-10-19T12:21:05","modified_gmt":"2026-10-19T09:21:05","slug":"elements-api-2025-10-10-update","status":"publish","type":"changelog","link":"https:\/\/support.withsecure.com\/en\/changelogs\/elements-api-2025-10-10-update\/","title":{"rendered":"Elements API &#8211; 2025-10-10 Update"},"content":{"rendered":"<h2 data-id=\"new-api-endpoint-get-incident-updates\">New API Endpoint: Get Incident Updates<\/h2>\n<p>We have added a new endpoint to\u00a0the Elements API that provides programmatic access to incident update\u00a0history.<\/p>\n<h3 data-id=\"endpoint-details\">Endpoint Details<\/h3>\n<p><strong>GET<\/strong>\u00a0\/incidents\/v1\/updates<\/p>\n<h3 data-id=\"description\">Description<\/h3>\n<p>This endpoint retrieves the\u00a0complete history of changes made to a specific incident\u00a0(Broad Context Detection). Each\u00a0update represents a modification\u00a0to the incident over its\u00a0lifecycle, including status changes, detection\u00a0additions, comments, and other\u00a0modifications.<\/p>\n<h3 data-id=\"key-capabilities\">Key Capabilities<\/h3>\n<h4 data-id=\"update-types-tracked\"><strong>Update Types Tracked<\/strong><\/h4>\n<ul>\n<li>Status\u00a0changes (patch)<\/li>\n<li>Detection additions, removals, and modifications<\/li>\n<li>User\u00a0comments<\/li>\n<li>Response actions<\/li>\n<li>Incident merges<\/li>\n<li>Risk\u00a0level adjustments<\/li>\n<li>Category\u00a0changes<\/li>\n<li>Threat investigation and validation results<\/li>\n<\/ul>\n<h4 data-id=\"state-tracking\"><strong>State Tracking<\/strong><\/h4>\n<p>Each\u00a0update includes\u00a0stateBefore\u00a0and\u00a0stateAfter\u00a0objects, allowing you to see\u00a0exactly what changed. This includes status, resolution, risk\u00a0level, and categories.<\/p>\n<h4 data-id=\"origin-information\"><strong>Origin Information<\/strong><\/h4>\n<p>Updates\u00a0include source information indicating whether the change was made by:<\/p>\n<ul>\n<li>A user (with display name)<\/li>\n<li>An automated engine<\/li>\n<li>A response action<\/li>\n<\/ul>\n<h4 data-id=\"pagination-support\"><strong>Pagination Support<\/strong><\/h4>\n<p>Results can\u00a0be paginated using anchor-based navigation, with a configurable limit of 1-100\u00a0updates per request (default 50).<\/p>\n<h4 data-id=\"filtering\"><strong>Filtering<\/strong><\/h4>\n<p>Filter\u00a0updates by type to retrieve only relevant changes (e.g., only\u00a0comments or only status changes).<\/p>\n<h3 data-id=\"customer-benefits\">Customer Benefits<\/h3>\n<ol>\n<li><strong>Complete Audit Trail<\/strong>: Access\u00a0the full history of incident modifications for compliance\u00a0and reporting purposes.<\/li>\n<li><strong>Accountability<\/strong>: Identify who made specific changes to\u00a0incidents through origin tracking.<\/li>\n<li><strong>Integration\u00a0Support<\/strong>: Build automated workflows that respond to specific\u00a0types of incident updates.<\/li>\n<li><strong>Change\u00a0Analysis<\/strong>: Compare before and after states to understand the\u00a0evolution of an incident.<\/li>\n<li><strong>Efficient\u00a0Data Retrieval<\/strong>: Use type\u00a0filtering to retrieve only relevant updates, reducing unnecessary data transfer.<\/li>\n<li><strong>Scalability<\/strong>: Pagination support allows handling incidents with extensive update histories.<\/li>\n<\/ol>\n<p>Read more from the <a href=\"http:\/\/community.withsecure.com\/home\/leaving?allowTrusted=1&amp;target=https%3A%2F%2Fconnect.withsecure.com%2Fapi-reference%2Felements%2F\" rel=\"nofollow noopener ugc\" target=\"_blank\">Elements API specification<\/a> page under &#8220;Get Incident Updates&#8221;.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>New API Endpoint: Get Incident Updates We have added a new endpoint to\u00a0the Elements API that provides programmatic access to incident update\u00a0history. Endpoint Details GET\u00a0\/incidents\/v1\/updates Description This endpoint retrieves the\u00a0complete&hellip;<\/p>\n","protected":false},"template":"","changelog_product":[128],"class_list":["post-4915","changelog","type-changelog","status-publish","hentry"],"acf":{"release_date":"20251010","version":"","source_system":"vanilla-import","source_foreign_id":"","import_hash":"08ba72cd8cc45d5a5f2c1a312318eb4e2c23da6c","vanilla_article_id":32638,"legacy_author":"ArtoV","vanilla_url":"https:\/\/community.withsecure.com\/changelogs-en\/kb\/articles\/32638-elements-api-2025-10-10-update","vanilla_category_id":170,"machine_translated":false},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/changelog\/4915","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/changelog"}],"about":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/types\/changelog"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=4915"}],"wp:term":[{"taxonomy":"changelog_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/changelog_product?post=4915"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}