List Case Connectors

elastic_security.find_case_connectors
ActionBusiness appsconnection required

Calls the Elastic Security API with the connection's credentials.

List the connectors a case can actually be pushed through.

Connection

Required
Yes — the node will not save without one
Auth type
API key
Providers
Elastic Security
Secret shape
the Kibana API key ("ApiKey <encoded>" or the bare encoded value), or {"api_key": "…"}
Config it needs
kibana_url, space_id, owner
Resolved by
config.connection_id, else node.connection_id

Configuration

This node takes no configuration beyond its connection.

Output

One shape.

result

FieldTypeExample
items
The connectors cases may be pushed to.
array—
count
How many connectors came back.
number—
{
  "count": 0,
  "items": []
}

Notes

  • Elastic caps this route at 20 connectors; it has no paging.

See List Case Connectors run in a workflow.

In a technical demo we add the Elastic Security connection, drop the node on the canvas and let Workflow Health pre-flight it before the first real run.