List Incident Comments

description retrieve all comments associated with a specified incident in microsoft azure sentinel, including necessary subscription and workspace details endpoint url /subscriptions/{{subscriptionid}}/resourcegroups/{{resourcegroupname}}/providers/microsoft operationalinsights/workspaces/{{workspacename}}/providers/microsoft securityinsights/incidents/{{incidentid}}/comments method get inputs path parameters (object) – required subscriptionid (string) – required resourcegroupname (string) – required workspacename (string) – required incidentid (string) – required parameters (object) – required api version (string) – required $filter (string) $orderby (string) $skiptoken (string) $top (number) output example \[ { "status code" 200, "response headers" { "cache control" "no cache", "pragma" "no cache", "transfer encoding" "chunked", "content type" "application/json; charset=utf 8", "content encoding" "gzip", "expires" " 1", "vary" "accept encoding", "server" "kestrel", "x ms ratelimit remaining subscription resource requests" "499", "x ms request id" "aa473e1f 78ce 4466 a0c6 f14359c755a2", "x ms correlation request id" "aa473e1f 78ce 4466 a0c6 f14359c755a2", "x ms routing request id" "centralindia 20240118t092209z\ aa473e1f 78ce 4466 a0c6 f14359c755a2", "strict transport security" "max age=31536000; includesubdomains", "x content type options" "nosniff", "date" "thu, 18 jan 2024 09 22 08 gmt" }, "reason" "ok", "json body" { "value" \[ { "id" "/subscriptions/d0cfe6b2 9ac0 4464 9919 dccaee2e48c0/resourcegroups/myrg/providers/microsoft operationalinsights/workspaces/myworkspace/providers/microsoft securityinsights/incidents/73e01a99 5cd7 4139 a149 9f2736ff2ab5/comments/4bb36b7b 26ff 4d1c 9cbe 0d8ab3da0014", "name" "4bb36b7b 26ff 4d1c 9cbe 0d8ab3da0014", "type" "microsoft securityinsights/incidents/comments", "etag" "0300bf09 0000 0000 0000 5c37296e0000", "properties" { "message" "some message", "createdtimeutc" "2019 01 01t13 15 30z", "lastmodifiedtimeutc" "2019 01 01t13 15 30z", "author" { "objectid" "2046feea 040d 4a46 9e2b 91c2941bfa70", "email" "john doe\@contoso com", "userprincipalname" "john\@contoso com", "name" "john doe" } } } ] } } ] output parameters status code (number) reason (string) json body (object) value (array) id (string) name (string) type (string) etag (string) properties (object) message (string) createdtimeutc (string) lastmodifiedtimeutc (string) author (object) objectid (string) email (string) userprincipalname (string) name (string) response headers header type cache control string pragma string transfer encoding string content type string content encoding string expires string vary string server string x ms ratelimit remaining subscription resource requests string x ms request id string x ms correlation request id string x ms routing request id string strict transport security string x content type options string date string