> ## Documentation Index > Fetch the complete documentation index at: https://docs.coralogix.com/llms.txt > Use this file to discover all available pages before exploring further. # Get available filter values > Retrieve available filter and aggregation values for cases. Requires the following permissions: - `case:Read` ## OpenAPI ````yaml openapi_v5.yaml post /cases/filter-values/v1 openapi: 3.0.0 info: title: '' version: 1.0.0 servers: - url: https://api.coralogix.com/mgmt/openapi/5 - url: https://api.eu2.coralogix.com/mgmt/openapi/5 - url: https://api.coralogix.us/mgmt/openapi/5 - url: https://api.cx498.coralogix.com/mgmt/openapi/5 - url: https://api.coralogix.in/mgmt/openapi/5 - url: https://api.coralogixsg.com/mgmt/openapi/5 - url: https://api.ap3.coralogix.com/mgmt/openapi/5 security: - apiKeyAuth: [] tags: - name: AI Applications Service description: Manage the catalog of AI applications discovered from spans. externalDocs: url: '' - name: AI Evaluations Service description: >- Manage AI evaluations and the custom evaluation catalog for AI applications. externalDocs: url: '' - name: API Keys Admin Service description: Administrative operations for API Keys management. externalDocs: url: '' - name: API Keys Service description: Manage your API Keys. externalDocs: url: '' - name: Actions Service description: View and manage your Actions. externalDocs: url: '' - name: Alert Scheduler Rule service description: Manage your alert scheduler rules. externalDocs: url: '' - name: Alert definitions service description: >- View and manage your alerts using alert definitions - data structures that contain the configuration required to create an alert. externalDocs: description: Learn more about alerts in our documentation url: https://coralogix.com/docs/user-guides/alerting/introduction-to-alerts/ - name: Alert events service description: >- Get information regarding your alert events - instances of alerts being triggered. externalDocs: description: Learn more about alert events and incidents in our documentation. url: https://coralogix.com/docs/user-guides/alerting/incidents/ - name: Case Events service description: Manage case events, comments, and external thread synchronization. externalDocs: url: '' - name: Case Settings service description: Manage case settings team configurations. externalDocs: url: '' - name: Cases notification service description: Track notification adjacent data for cases. externalDocs: url: '' - name: Cases service description: >- Manage cases throughout their lifecycle. Create, view, assign, acknowledge, unacknowledge, resolve, and close cases to streamline investigations and follow-ups. externalDocs: description: Learn more about Cases in our documentation url: https://coralogix.com/docs/user-guides/cases/ - name: Connector Schema service description: Retrieve connector schemas for notification center integrations externalDocs: description: Learn more about connectors in our documentation url: >- https://coralogix.com/docs/user-guides/notification-center/connectors/introduction/ - name: Connectors service description: >- View and manage your connectors - integration instances for notification destinations externalDocs: description: Lean more about connectors in our documentation url: >- https://coralogix.com/docs/user-guides/notification-center/connectors/introduction/ - name: Contextual data integration service description: Query for contextual data integration information. externalDocs: url: '' - name: Custom Enrichments Service description: Manage your enrichments. externalDocs: url: '' - name: Dashboard folders service description: Manage your dashboard folders. externalDocs: url: '' - name: Dashboard service description: Get information about the Coralogix Dashboard catalog. externalDocs: url: '' - name: Data Usage Query service description: >- Query billable data usage through the public Coralogix API using daily or hourly bucketed aggregations over supported labels. externalDocs: url: '' - name: Data Usage Service description: A service to manage data usage metrics. externalDocs: url: '' - name: Enrichments Service description: Manage your enrichments. externalDocs: url: '' - name: Entities service description: Query information about registered entities in the notification center externalDocs: description: Lean more about the notification center in our documentation url: https://coralogix.com/docs/user-guides/notification-center/introduction/ - name: Events Service description: A service for querying events. externalDocs: description: Learn more about alerts in our documentation url: https://coralogix.com/docs/user-guides/alerting/introduction-to-alerts/ - name: Events2Metrics Service description: Manage your events2metrics. externalDocs: url: '' - name: Extension deployment service description: A service that enables querying for extension deployment information. externalDocs: description: Find out more about extensions in our documentation. url: https://coralogix.com/docs/integrations/extensions/ - name: Extension service description: A service that enables querying for extension information. externalDocs: description: Learn more about extensions in our documentation. url: https://coralogix.com/docs/integrations/extensions/ - name: Folders for views service description: Create and manage view folders. externalDocs: url: '' - name: Global routers service description: >- View and manage your global routers - entities that direct notifications to configured destinations based on conditions externalDocs: description: Lean more about global routers in our documentation url: >- https://coralogix.com/docs/user-guides/notification-center/routing/introduction/ - name: IP access service description: >- IP access service provides the API for managing company IP access settings. externalDocs: url: '' - name: Incidents service description: >- Handle all operations related to incident management within Coralogix. Identify, manage, and resolve incidents efficiently through automated workflows and team collaboration. externalDocs: description: Find out more about incident management in our documentation url: https://coralogix.com/docs/user-guides/alerting/incidents/ - name: Integration service description: A service that enables querying for integration information. externalDocs: description: Find out more about integrations in our documentation. url: https://coralogix.com/docs/integrations/getting-started/ - name: Metrics Data Archive Service description: View and manage your storage targets for metrics. externalDocs: description: Find out more about archives url: >- https://coralogix.com/docs/user-guides/data-flow/s3-archive/connect-s3-archive/ - name: Notifications testing service description: >- Test your notification center configurations including connectors, presets, and templates externalDocs: description: Lean more about the notification center in our documentation url: https://coralogix.com/docs/user-guides/notification-center/introduction/ - name: Outgoing webhooks service externalDocs: description: Find out more about outbound webhooks in our documentation. url: >- https://coralogix.com/docs/user-guides/alerting/outbound-webhooks/generic-outbound-webhooks-alert-webhooks/ - name: Policies Service description: View and manage your TCO policies externalDocs: url: '' - name: Presets service description: >- View and manage your presets - pre-configured templates for notification content rendering externalDocs: description: Lean more about presets in our documentation url: >- https://coralogix.com/docs/user-guides/notification-center/presets/introduction/ - name: Quota Allocation Rule Set service description: Manage quota allocation rules for different entity types. externalDocs: url: '' - name: Recording Rules Service description: A service to manage recording rules. externalDocs: url: '' - name: Retentions Service description: View and manage retentions externalDocs: url: '' - name: Role Management Service description: Service for managing system and custom roles. externalDocs: url: '' - name: Rule Groups Service description: A service to manage rule groups. externalDocs: url: '' - name: SAML Configuration Service description: Manage your SAML configuration externalDocs: url: '' - name: Scopes Service description: A service to manage scopes externalDocs: url: '' - name: Slos Service description: A service for managing Service Level Objectives (SLOs). externalDocs: url: '' - name: Target Service description: View and manage your storage targets for logs. externalDocs: description: Find out more about archives url: >- https://coralogix.com/docs/user-guides/data-flow/s3-archive/connect-s3-archive/ - name: Team Groups Management Service description: Manage Team Groups. externalDocs: url: '' - name: Users Management Service description: >- Manage team members (users) including creation, updates, search, and status management. externalDocs: url: '' - name: Views service description: Create and manage views. externalDocs: url: '' paths: /cases/filter-values/v1: post: tags: - Cases service summary: Get available filter values description: |- Retrieve available filter and aggregation values for cases. Requires the following permissions: - `case:Read` operationId: CasesService_GetFilterValues requestBody: content: application/json: schema: description: >- Request to retrieve available filter and aggregation values for cases. properties: filters: $ref: '#/components/schemas/CaseFilters' title: Get case filter values request type: object responses: '200': content: application/json: schema: $ref: '#/components/schemas/cases.v1.GetFilterValuesResponse' description: '' '400': content: application/json: schema: $ref: '#/components/schemas/Error' description: Bad Request '401': content: application/json: schema: $ref: '#/components/schemas/Error' description: Unauthorized request '500': content: application/json: schema: $ref: '#/components/schemas/Error' description: Internal server error externalDocs: url: '' components: schemas: CaseFilters: title: Case filters type: object properties: alertFilters: $ref: '#/components/schemas/AlertFilters' assignees: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/AssigneeOption' description: List of case assignees to filter on breached: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/KPIFilter' description: >- KPI-based filters applied to cases. When absent, KPI filter is not applied at all. example: - KPI_FILTER_NOT_BREACHED caseLabelsFilter: $ref: '#/components/schemas/CaseLabelsFilter' categories: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/CaseCategory' description: List of case categories to filter on example: - CASE_CATEGORY_SECURITY - CASE_CATEGORY_AVAILABILITY connectorTypeFilters: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/ConnectorTypeFilter' description: >- Connector type filters applied to cases, including cases with no connector linked. dateRange: $ref: '#/components/schemas/DateRangeFilter' groupings: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/FilterGroup' description: Grouping-based filters (e.g., service, subsystem) indicatorTypes: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/IndicatorType' description: List of indicator types to filter on labels: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/FilterGroup' description: Label-based filters applied to cases priorities: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/CasePriority' description: List of case priorities to filter on example: - CASE_PRIORITY_P1 - CASE_PRIORITY_P2 statuses: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/CaseStatus' description: List of case statuses to filter on textSearch: maxLength: 4096 minLength: 1 pattern: ^[\s\S]*$ type: string description: Test search query applied to case titles example: Vulnerability description: >- Filters applied when querying cases, including statuses, priorities, categories, groupings, and labels. externalDocs: url: '' cases.v1.GetFilterValuesResponse: title: Get case filter values response required: - priorityAggregations - categoryAggregations - groupingAggregations - labelAggregations - statusAggregations - flatLabelsAggregation - alertIdAggregations type: object properties: alertIdAggregations: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/AlertIdAggregation' description: >- Aggregated case counts per alert definition ID. Only populated when alert_filters is provided in the request. assigneeAggregations: $ref: '#/components/schemas/AssigneeAggregation' categoryAggregations: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/CategoryAggregation' description: Aggregated case counts grouped by category. flatLabelsAggregation: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/FilterAggregation' description: >- Aggregated case counts grouped by individual flat label key/value pairs. groupingAggregations: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/FilterGroupAggregation' description: Aggregated case counts grouped by grouping key/value pairs. labelAggregations: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/FilterGroupAggregation' description: Aggregated case counts grouped by label key/value pairs. priorityAggregations: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/PriorityAggregation' description: Aggregated case counts grouped by priority. statusAggregations: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/StatusAggregation' description: Aggregated case counts grouped by status. description: Aggregated counts for building filters in the UI externalDocs: url: '' Error: type: object properties: code: maximum: 599 minimum: 100 type: integer description: HTTP status code of the error (for example 400, 404, 500). format: int32 message: maxLength: 4096 minLength: 0 pattern: ^[\s\S]*$ type: string description: Human-readable description of the error. description: Standard error response body returned for a failed request. AlertFilters: title: Alert filters type: object properties: alertIds: maxItems: 1000 minItems: 0 type: array items: maxLength: 36 minLength: 36 pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ type: string description: >- List of alert IDs to filter on. Cases containing any of these alert IDs will be returned (OR logic). description: >- List of alert IDs to filter on. Cases containing any of these alert IDs will be returned (OR logic). example: - f56645c5-9cd4-4b9f-961f-4f852d8835a0 - a0a08c31-0ae4-4600-928e-cb6b7da50a99 alertVersions: maxItems: 1000 minItems: 0 type: array items: maxLength: 64 minLength: 1 pattern: ^[\s\S]*$ type: string description: >- List of alert version IDs to filter on. Cases containing indicators with any of these alert version IDs will be returned (OR logic). description: >- List of alert version IDs to filter on. Cases containing indicators with any of these alert version IDs will be returned (OR logic). example: - 550e8400-e29b-41d4-a716-446655440000 - 6ba7b810-9dad-11d1-80b4-00c04fd430c8 description: Filters applied to cases based on alert properties. externalDocs: url: '' AssigneeOption: title: Assignee option type: object oneOf: - required: - assignee type: object - required: - unassigned type: object - type: object not: anyOf: - required: - assignee type: object - required: - unassigned type: object properties: assignee: maxLength: 256 minLength: 1 pattern: ^[\s\S]*$ type: string description: User identifier of the assignee to filter by example: e07db42e-eb1c-4c14-ab68-e4d245ae63a5 unassigned: $ref: '#/components/schemas/Unassigned' description: >- Assignee filter option representing either a specific assignee or unassigned cases. externalDocs: url: '' KPIFilter: enum: - KPI_FILTER_UNSPECIFIED - KPI_FILTER_TIME_TO_ACKNOWLEDGE_BREACHED - KPI_FILTER_TIME_TO_RESOLVE_BREACHED - KPI_FILTER_NOT_BREACHED - KPI_FILTER_TIME_TO_UPDATE_BREACHED type: string CaseLabelsFilter: title: Case Labels Filter type: object properties: flatLabels: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/v1.KeyValue' description: List of case key:value labels to filter on description: Filters applied against Case's labels when queries/filters counted externalDocs: url: '' CaseCategory: title: Case category enum: - CASE_CATEGORY_UNSPECIFIED - CASE_CATEGORY_SECURITY - CASE_CATEGORY_AVAILABILITY type: string description: Broad category of the case (e.g., security, availability). ConnectorTypeFilter: title: Connector type filters type: object oneOf: - required: - connectorType type: object - required: - noConnector type: object - type: object not: anyOf: - required: - connectorType type: object - required: - noConnector type: object properties: connectorType: $ref: '#/components/schemas/v1.ConnectorType' noConnector: $ref: '#/components/schemas/NoConnector' description: Filters applied to cases based on connector types. externalDocs: url: '' DateRangeFilter: title: Date Range Filter required: - from - to type: object properties: from: maxLength: 30 minLength: 20 type: string description: Timestamp marking the start of the date range format: date-time example: '2025-09-22T10:30:00.000Z' mode: $ref: '#/components/schemas/DateRangeMode' to: maxLength: 30 minLength: 20 type: string description: Timestamp marking the end of the date range format: date-time example: '2025-09-22T10:30:00.000Z' description: A filter defining a date range with 'from' and 'to' timestamps. externalDocs: url: '' FilterGroup: title: Filter group required: - key - values type: object properties: key: maxLength: 4096 minLength: 1 pattern: ^[\s\S]*$ type: string description: Key of the filter group (e.g., service, environment) example: service values: maxItems: 1000 minItems: 0 type: array items: maxLength: 4096 minLength: 1 pattern: ^[\s\S]*$ type: string description: Values associated with the filter group key description: Values associated with the filter group key example: - payments description: A filter group containing a key and its possible values. externalDocs: url: '' IndicatorType: enum: - INDICATOR_TYPE_UNSPECIFIED - INDICATOR_TYPE_ALERT - INDICATOR_TYPE_PROMETHEUS_ALERTMANAGER - INDICATOR_TYPE_ERROR_TRACKING type: string CasePriority: enum: - CASE_PRIORITY_UNSPECIFIED - CASE_PRIORITY_P1 - CASE_PRIORITY_P2 - CASE_PRIORITY_P3 - CASE_PRIORITY_P4 - CASE_PRIORITY_P5 type: string description: Case priority. CaseStatus: enum: - CASE_STATUS_UNSPECIFIED - CASE_STATUS_PENDING_ACTIVATION - CASE_STATUS_ACTIVE - CASE_STATUS_ACKNOWLEDGED - CASE_STATUS_RESOLVED - CASE_STATUS_CLOSED type: string description: Case status. AlertIdAggregation: title: Alert ID aggregation type: object properties: alertId: maxLength: 36 minLength: 36 pattern: ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$ type: string description: Alert definition ID example: f56645c5-9cd4-4b9f-961f-4f852d8835a0 count: maximum: 1000000000 minimum: 0 type: integer description: Number of cases associated with this alert ID format: int64 example: 5 description: Count of cases associated with a single alert definition ID. externalDocs: url: '' AssigneeAggregation: title: Assignee aggregation required: - assignedCounts type: object properties: assignedCounts: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/AssigneeCount' description: Counts of cases grouped by assignee unassignedCount: maximum: 1000000000 minimum: 0 type: integer description: Number of cases without an assignee format: int64 description: Case counts broken down by assignee plus the count of unassigned cases. externalDocs: url: '' CategoryAggregation: title: Category aggregation type: object properties: category: $ref: '#/components/schemas/CaseCategory' count: maximum: 1000000000 minimum: 0 type: integer description: Number of cases in this category format: int64 example: 13 description: Count of cases grouped by case category. externalDocs: url: '' FilterAggregation: title: Filter aggregation type: object properties: count: maximum: 1000000000 minimum: 0 type: integer description: Number of cases matching this filter format: int64 filter: $ref: '#/components/schemas/v1.KeyValue' description: Count of cases matching a single key/value filter combination. externalDocs: url: '' FilterGroupAggregation: title: Filter group aggregation required: - valueCounts type: object properties: key: maxLength: 4096 minLength: 1 pattern: ^[\s\S]*$ type: string description: Filter group key example: service valueCounts: maxItems: 1000 minItems: 0 type: array items: $ref: '#/components/schemas/ValueCount' description: Aggregations per value description: >- Aggregated case counts for a single filter group key, with one entry per observed value. externalDocs: url: '' PriorityAggregation: title: Priority aggregation type: object properties: count: maximum: 1000000000 minimum: 0 type: integer description: Number of cases with this priority format: int64 example: 17 priority: $ref: '#/components/schemas/CasePriority' description: Count of cases grouped by case priority. externalDocs: url: '' StatusAggregation: title: Status aggregation type: object properties: count: maximum: 1000000000 minimum: 0 type: integer description: Number of cases with this status format: int64 status: $ref: '#/components/schemas/CaseStatus' description: Count of cases grouped by case status. externalDocs: url: '' Unassigned: title: Unassigned type: object additionalProperties: false description: Marker selecting cases that have no assignee. externalDocs: url: '' v1.KeyValue: title: Key-value pair required: - key - value type: object properties: key: minLength: 0 type: string description: Key of the pair (e.g., label or grouping name) example: service value: minLength: 0 type: string description: Value associated with the key example: payments description: >- Represents a simple key-value pair, often used for labels or groupings in cases. externalDocs: url: '' v1.ConnectorType: enum: - CONNECTOR_TYPE_UNSPECIFIED - CONNECTOR_TYPE_SLACK - CONNECTOR_TYPE_SERVICE_NOW - CONNECTOR_TYPE_PAGER_DUTY - CONNECTOR_TYPE_EMAIL - CONNECTOR_TYPE_GENERIC_HTTPS - CONNECTOR_TYPE_MICROSOFT_TEAMS type: string description: Connector type. NoConnector: type: object additionalProperties: false description: No connector. externalDocs: url: '' DateRangeMode: title: Date range mode enum: - DATE_RANGE_MODE_UNSPECIFIED - DATE_RANGE_MODE_ACTIVE_WINDOW - DATE_RANGE_MODE_CREATED_AT type: string description: >- Determines how the date range is applied to cases (active window vs creation time). AssigneeCount: title: Assignee count type: object properties: assignee: maxLength: 256 minLength: 1 pattern: ^[\s\S]*$ type: string description: Identifier of the assignee count: maximum: 1000000000 minimum: 0 type: integer description: Number of cases assigned to this assignee format: int64 description: Count of cases for a single assignee. externalDocs: url: '' ValueCount: title: Filter value count type: object properties: count: maximum: 1000000000 minimum: 0 type: integer description: Count of cases for this value format: int64 example: 8 value: maxLength: 4096 minLength: 1 pattern: ^[\s\S]*$ type: string description: Filter value example: service:payments description: Number of cases that share a single filter group value. externalDocs: url: '' securitySchemes: apiKeyAuth: type: apiKey in: header name: Authorization description: API key authentication ````