server_api_swagger.json

{
  "consumes": [
    "application/json",
    "application/xml"
  ],
  "produces": [
    "application/json"
  ],
  "schemes": [
    "https"
  ],
  "swagger": "2.0",
  "info": {
    "description": "This is the public REST API to integrate with the demisto server.\nHTTP request can be sent using any HTTP-client.\n\nFor an example dedicated client take a look at: https://github.com/demisto/demisto-py.\n\nRequests must include API-key that can be generated in the Demisto web client under 'Settings' -\u003e 'Integrations' -\u003e 'API keys'\n\n\nOptimistic Locking and Versioning\\:\n\nWhen using Demisto REST API, you will need to make sure to work on the latest version of the item (incident, entry, etc.), otherwise, you will get a DB version error (which not allow you to override a newer item).\nIn addition, you can pass 'version\\: -1' to force data override (make sure that other users data might be lost).\n\nAssume that Alice and Bob both read the same data from Demisto server, then they both changed the data, and then both tried to write the new versions back to the server. Whose changes should be saved? Alice’s? Bob’s?\nTo solve this, each data item in Demisto has a numeric incremental version.\nIf Alice saved an item with version 4 and Bob trying to save the same item with version 3, Demisto will rollback Bob request and returns a DB version conflict error.\nBob will need to get the latest item and work on it so Alice work will not get lost.\n\nExample request using 'curl'\\:\n\n```\ncurl 'https://hostname:443/incidents/search' -H 'content-type: application/json' -H 'accept: application/json' -H 'Authorization: \u003cAPI Key goes here\u003e' --data-binary '{\"filter\":{\"query\":\"-status:closed -category:job\",\"period\":{\"by\":\"day\",\"fromValue\":7}}}' --compressed\n```",
    "title": "Demisto API",
    "version": "2.0.0"
  },
  "host": "hostname:443",
  "paths": {
    "/apikeys/revoke/user/{username}": {
      "post": {
        "description": "Revoke API Key for user",
        "produces": [
          "application/octet-stream"
        ],
        "operationId": "revokeUserAPIKey",
        "parameters": [
          {
            "type": "string",
            "description": "The username which the API keys assigned to",
            "name": "username",
            "in": "path",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "200 for success"
          }
        }
      }
    },
    "/automation": {
      "post": {
        "description": "Create or update a given automation.",
        "summary": "Create or update automation",
        "operationId": "saveOrUpdateScript",
        "parameters": [
          {
            "name": "automationScriptFilterWrapper",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/automationScriptFilterWrapper"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "The saved automation.",
            "schema": {
              "$ref": "#/definitions/automationScriptResult"
            }
          }
        }
      }
    },
    "/automation/copy": {
      "post": {
        "description": "Copy given automation",
        "summary": "Copy automation",
        "operationId": "copyScript",
        "parameters": [
          {
            "name": "automationScriptFilterWrapper",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/automationScriptFilterWrapper"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "The saved automation.",
            "schema": {
              "$ref": "#/definitions/automationScriptResult"
            }
          }
        }
      }
    },
    "/automation/delete": {
      "post": {
        "description": "Delete a given automation from the system.",
        "summary": "Delete existing automation",
        "operationId": "deleteAutomationScript",
        "parameters": [
          {
            "name": "automationScriptFilterWrapper",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/automationScriptFilterWrapper"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "automation deleted"
          }
        }
      }
    },
    "/automation/search": {
      "post": {
        "description": "Search Automation by filter",
        "summary": "Search Automation (aka scripts)",
        "operationId": "getAutomationScripts",
        "parameters": [
          {
            "name": "automationScriptFilter",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/automationScriptFilter"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "automationScriptResult",
            "schema": {
              "$ref": "#/definitions/automationScriptResult"
            }
          }
        }
      }
    },
    "/entry": {
      "post": {
        "description": "API to create an entry (markdown format) in existing investigation\nBody example: {\"investigationId\":\"1234\",\"data\":\"entry content…\"}",
        "summary": "Create new entry in existing investigation",
        "operationId": "investigationAddEntryHandler",
        "parameters": [
          {
            "name": "updateEntry",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/updateEntry"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Entry",
            "schema": {
              "$ref": "#/definitions/Entry"
            }
          },
          "412": {
            "description": "In case of closed investigation"
          }
        }
      }
    },
    "/entry/artifact/{id}": {
      "get": {
        "description": "Get the entry artifact file",
        "produces": [
          "application/octet-stream"
        ],
        "summary": "Get entry artifact",
        "operationId": "getEntryArtifact",
        "parameters": [
          {
            "type": "string",
            "description": "file to fetch (returned from entry export artifact call)",
            "name": "id",
            "in": "path",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "Return the file",
            "schema": {
              "type": "file"
            }
          }
        }
      }
    },
    "/entry/exportArtifact": {
      "post": {
        "description": "Export an entry artifact",
        "summary": "Export Artifact",
        "operationId": "entryExportArtifact",
        "parameters": [
          {
            "name": "DownloadEntry",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/DownloadEntry"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "created file name",
            "schema": {
              "type": "string"
            }
          }
        }
      }
    },
    "/entry/formatted": {
      "post": {
        "description": "API to create a formatted entry (table/json/text/markdown/html) in existing investigation\nBody example: {\"investigationId\":\"1234\",\"format\":\"table/json/text/markdown/html\",\"contents\":\"entry content…\"}",
        "summary": "Create new formatted entry in existing investigation",
        "operationId": "investigationAddFormattedEntryHandler",
        "parameters": [
          {
            "name": "uploadedEntry",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/uploadedEntry"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Entry",
            "schema": {
              "$ref": "#/definitions/Entry"
            }
          }
        }
      }
    },
    "/entry/note": {
      "post": {
        "description": "API to mark entry as note, can be used also to remove the note\nBody example: {\"id\":1\\@1234\",\"version\":\"-1\",\"investigationId\":\"1234\",\"data\":\"true/false\"}",
        "summary": "Mark entry as note",
        "operationId": "updateEntryNote",
        "parameters": [
          {
            "name": "updateEntry",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/updateEntry"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Entry",
            "schema": {
              "$ref": "#/definitions/Entry"
            }
          }
        }
      }
    },
    "/entry/tags": {
      "post": {
        "description": "API to set entry tags\nBody example: {\"id\":\"1\\@1234\",\"version\":\"-1\",\"investigationId\":\"1234\",\"tags\":[\"tag1\",\"tag2\"]\"}",
        "summary": "Set entry tags",
        "operationId": "updateEntryTagsOp",
        "parameters": [
          {
            "name": "updateEntryTags",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/updateEntryTags"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Entry",
            "schema": {
              "$ref": "#/definitions/Entry"
            }
          }
        }
      }
    },
    "/evidence": {
      "post": {
        "description": "Save an evidence entity\nTo update evidence custom fields you should lowercase them and remove all spaces. For example: Scan IP -\u003e scanip",
        "summary": "Save evidence",
        "operationId": "saveEvidence",
        "parameters": [
          {
            "name": "Evidence",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/Evidence"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "The new / updated Evidence",
            "schema": {
              "$ref": "#/definitions/Evidence"
            }
          }
        }
      }
    },
    "/evidence/delete": {
      "post": {
        "description": "Delete an evidence entity",
        "summary": "delete evidence",
        "operationId": "deleteEvidenceOp",
        "parameters": [
          {
            "name": "deleteEvidence id",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/deleteEvidence"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Deleted evidence ID"
          }
        }
      }
    },
    "/evidence/search": {
      "post": {
        "description": "Search for an evidence entutiy by filter",
        "summary": "Search evidence",
        "operationId": "searchEvidence",
        "parameters": [
          {
            "name": "evidencesFilterWrapper",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/evidencesFilterWrapper"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "EvidencesSearchResponse",
            "schema": {
              "$ref": "#/definitions/EvidencesSearchResponse"
            }
          }
        }
      }
    },
    "/incident": {
      "post": {
        "description": "Create or update incident according to JSON structure.\nTo update incident custom fields you should lowercase them and remove all spaces. For example: Scan IP -\u003e scanip\nTo get the actual key name you can also go to Demisto CLI and run /incident_add and look for the key that you would like to update\n\nUse the 'createInvestigation\\: True' to start the investigation process automatically. (by running a playbook based on incident type.)",
        "summary": "Create single incident",
        "operationId": "createIncident",
        "parameters": [
          {
            "name": "CreateIncidentRequest",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/CreateIncidentRequest"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "IncidentWrapper",
            "schema": {
              "$ref": "#/definitions/IncidentWrapper"
            }
          }
        }
      }
    },
    "/incident/batch": {
      "post": {
        "description": "Create or update an incidents batch\nTo update incident custom fields you should lowercase them and remove all spaces. For example: Scan IP -\u003e scanip\nTo get the actual key name you can also go to Demisto CLI and run /incident_add and look for the key that you would like to update",
        "summary": "Batch create incidents",
        "operationId": "createIncidentsBatch",
        "parameters": [
          {
            "name": "UpdateDataBatch",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/UpdateDataBatch"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "IncidentSearchResponseWrapper",
            "schema": {
              "$ref": "#/definitions/IncidentSearchResponseWrapper"
            }
          }
        }
      }
    },
    "/incident/batch/exportToCsv": {
      "post": {
        "description": "Exports an incidents batch to CSV file (returns file ID)",
        "summary": "Batch export incidents to csv",
        "operationId": "exportIncidentsToCsvBatch",
        "parameters": [
          {
            "name": "UpdateDataBatch",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/UpdateDataBatch"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "csv file name",
            "schema": {
              "type": "string"
            }
          }
        }
      }
    },
    "/incident/batchClose": {
      "post": {
        "description": "Closes an incidents batch\nTo update incident custom fields you should lowercase them and remove all spaces. For example: Scan IP -\u003e scanip\nTo get the actual key name you can also go to Demisto CLI and run /incident_add and look for the key that you would like to update",
        "summary": "Batch close incidents",
        "operationId": "closeIncidentsBatch",
        "parameters": [
          {
            "name": "UpdateDataBatch",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/UpdateDataBatch"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "IncidentSearchResponseWrapper",
            "schema": {
              "$ref": "#/definitions/IncidentSearchResponseWrapper"
            }
          }
        }
      }
    },
    "/incident/batchDelete": {
      "post": {
        "description": "Deletes an incidents batch",
        "summary": "Batch delete incidents",
        "operationId": "deleteIncidentsBatch",
        "parameters": [
          {
            "name": "UpdateDataBatch",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/UpdateDataBatch"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "IncidentSearchResponseWrapper",
            "schema": {
              "$ref": "#/definitions/IncidentSearchResponseWrapper"
            }
          }
        }
      }
    },
    "/incident/csv/{id}": {
      "get": {
        "description": "Get an incident CSV file that was exported, by ID",
        "produces": [
          "application/octet-stream"
        ],
        "summary": "Get incident as CSV",
        "operationId": "getIncidentAsCsv",
        "parameters": [
          {
            "type": "string",
            "description": "CSV file to fetch (returned from batch export to csv call)",
            "name": "id",
            "in": "path",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "Return Csv file",
            "schema": {
              "type": "file"
            }
          }
        }
      }
    },
    "/incident/json": {
      "post": {
        "description": "Create single incident from raw JSON, builds incident according to default mapping",
        "summary": "Create incident from JSON",
        "operationId": "createIncidentJson",
        "responses": {
          "200": {
            "description": "IncidentWrapper",
            "schema": {
              "$ref": "#/definitions/IncidentWrapper"
            }
          }
        }
      }
    },
    "/incident/upload/{id}": {
      "post": {
        "description": "Add file attachement to an incidents",
        "consumes": [
          "multipart/form-data"
        ],
        "operationId": "incidentFileUpload",
        "parameters": [
          {
            "type": "string",
            "description": "Incident id to update",
            "name": "id",
            "in": "path"
          },
          {
            "type": "string",
            "description": "file name",
            "name": "fileName",
            "in": "formData"
          },
          {
            "type": "string",
            "description": "file comment",
            "name": "fileComment",
            "in": "formData"
          },
          {
            "type": "string",
            "description": "field name to hold the attachment details. If not specified, `attachment` will be used.",
            "name": "field",
            "in": "formData"
          },
          {
            "type": "boolean",
            "description": "show media file",
            "name": "showMediaFile",
            "in": "formData"
          },
          {
            "type": "boolean",
            "description": "If set to true will create an investigation. Used for uploading after creating incident.",
            "name": "last",
            "in": "formData"
          },
          {
            "type": "file",
            "description": "file",
            "name": "file",
            "in": "formData",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "IncidentWrapper",
            "schema": {
              "$ref": "#/definitions/IncidentWrapper"
            }
          }
        }
      }
    },
    "/incidentfields/associatedTypes/{type}": {
      "get": {
        "description": "Get all incident fields associated with incident type",
        "summary": "Get all incident fields associated with incident type",
        "operationId": "getIncidentsFieldsByIncidentType",
        "parameters": [
          {
            "type": "string",
            "description": "the name (case sensitive) of the incident type",
            "name": "type",
            "in": "path",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "Returns a list of incident fields associated with the incident type",
            "schema": {
              "type": "array",
              "items": {
                "$ref": "#/definitions/IncidentField"
              }
            }
          }
        }
      }
    },
    "/incidents/search": {
      "post": {
        "description": "This will search incidents across all indices\nYou can filter by multiple options",
        "summary": "Search incidents by filter",
        "operationId": "searchIncidents",
        "parameters": [
          {
            "name": "filter",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/SearchIncidentsData"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "incidentSearchResponse",
            "schema": {
              "type": "object",
              "properties": {
                "incidents": {
                  "type": "array",
                  "items": {
                    "$ref": "#/definitions/Incident"
                  }
                },
                "total": {
                  "type": "integer"
                }
              }
            }
          }
        }
      }
    },
    "/incidenttype": {
      "post": {
        "description": "API to create new Incident Type",
        "summary": "Create new Incident Type",
        "operationId": "createOrUpdateIncidentType",
        "parameters": [
          {
            "name": "IncidentType",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/IncidentType"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "IncidentType",
            "schema": {
              "$ref": "#/definitions/IncidentType"
            }
          }
        }
      }
    },
    "/indicator/create": {
      "post": {
        "description": "Create an indicator entity\nTo update indicator custom fields you should lowercase them and remove all spaces. For example: Scan IP -\u003e scanip",
        "summary": "Create Indicator",
        "operationId": "indicatorsCreate",
        "parameters": [
          {
            "name": "IocObject",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/indicatorContext"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "IocObject",
            "schema": {
              "$ref": "#/definitions/IocObject"
            }
          }
        }
      }
    },
    "/indicator/edit": {
      "post": {
        "description": "Edit an indicator entity\nTo update indicator custom fields you should lowercase them and remove all spaces. For example: Scan IP -\u003e scanip",
        "summary": "Edit Indicator",
        "operationId": "indicatorsEdit",
        "parameters": [
          {
            "name": "IocObject",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/IocObject"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "IocObject",
            "schema": {
              "$ref": "#/definitions/IocObject"
            }
          }
        }
      }
    },
    "/indicator/whitelist": {
      "post": {
        "description": "Whitelists or deletes an indicator entity\nIn order to delete an indicator and not whitelist, set doNotWhitelist boolean field to true",
        "summary": "Whitelists or deletes Indicator",
        "operationId": "indicatorWhitelist",
        "parameters": [
          {
            "name": "updateIndicatorReputationData",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/updateIndicatorReputationData"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "UpdateResponse",
            "schema": {
              "$ref": "#/definitions/UpdateResponse"
            }
          }
        }
      }
    },
    "/indicators/batch/export/stix": {
      "post": {
        "description": "Exports an indicators batch to STIX file (returns file ID)",
        "summary": "Batch export indicators to STIX",
        "operationId": "exportIndicatorsToStixBatch",
        "parameters": [
          {
            "name": "genericIndicatorUpdateBatch",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/genericIndicatorUpdateBatch"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "STIX file name",
            "schema": {
              "type": "string"
            }
          }
        }
      }
    },
    "/indicators/batch/exportToCsv": {
      "post": {
        "description": "Exports an indicators batch to CSV file (returns file ID)",
        "summary": "Batch export indicators to csv",
        "operationId": "exportIndicatorsToCsvBatch",
        "parameters": [
          {
            "description": "Required parameters from `genericIndicatorUpdateBatch`: `columns`,\n`filter`. You should also include either `all` or `ids`\n",
            "name": "genericIndicatorUpdateBatch",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/genericIndicatorUpdateBatch"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "csv file name",
            "schema": {
              "type": "string"
            }
          }
        }
      }
    },
    "/indicators/batchDelete": {
      "post": {
        "description": "Batch whitelist or delete indicators entities\nIn order to delete indicators and not whitelist, set doNotWhitelist boolean field to true",
        "summary": "Batch whitelist or delete indicators",
        "operationId": "deleteIndicatorsBatch",
        "parameters": [
          {
            "name": "genericIndicatorUpdateBatch",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/genericIndicatorUpdateBatch"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "UpdateResponse",
            "schema": {
              "$ref": "#/definitions/UpdateResponse"
            }
          }
        }
      }
    },
    "/indicators/csv/{id}": {
      "get": {
        "description": "Get an indicators CSV file that was exported, by ID",
        "produces": [
          "application/octet-stream"
        ],
        "summary": "Get indicators as CSV",
        "operationId": "getIndicatorsAsCsv",
        "parameters": [
          {
            "type": "string",
            "description": "CSV file to fetch (returned from batch export to csv call)",
            "name": "id",
            "in": "path",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "Return Csv file",
            "schema": {
              "type": "file"
            }
          }
        }
      }
    },
    "/indicators/search": {
      "post": {
        "description": "Search indicators by filter",
        "summary": "Search indicators",
        "operationId": "indicatorsSearch",
        "parameters": [
          {
            "name": "IndicatorFilter",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/IndicatorFilter"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "indicatorResult",
            "schema": {
              "$ref": "#/definitions/IndicatorResult"
            }
          }
        }
      }
    },
    "/indicators/stix/v2/{id}": {
      "get": {
        "description": "Get an indicators STIX V2 file that was exported, by ID",
        "produces": [
          "application/octet-stream"
        ],
        "summary": "Get indicators as STIX V2",
        "operationId": "getIndicatorsAsSTIX",
        "parameters": [
          {
            "type": "string",
            "description": "STIX V2 file to fetch (returned from batch export to STIX call)",
            "name": "id",
            "in": "path",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "Return STIX V2 file",
            "schema": {
              "type": "file"
            }
          }
        }
      }
    },
    "/indicators/upload": {
      "post": {
        "description": "Create indicators from a file",
        "consumes": [
          "multipart/form-data"
        ],
        "summary": "Create indicators",
        "operationId": "indicatorsCreateBatch",
        "parameters": [
          {
            "type": "string",
            "description": "file name",
            "name": "fileName",
            "in": "formData"
          },
          {
            "type": "file",
            "description": "file",
            "name": "file",
            "in": "formData",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "IocObjects",
            "schema": {
              "$ref": "#/definitions/IocObjects"
            }
          }
        }
      }
    },
    "/inv-playbook/task/add/{investigationId}": {
      "post": {
        "description": "Add an ad-hoc task to a running playbook",
        "summary": "Add ad-hoc task",
        "operationId": "addAdHocTask",
        "parameters": [
          {
            "name": "InvPlaybookTaskData",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/InvPlaybookTaskData"
            }
          },
          {
            "type": "string",
            "description": "investigation ID",
            "name": "investigationId",
            "in": "path",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "InvestigationPlaybook",
            "schema": {
              "$ref": "#/definitions/InvestigationPlaybook"
            }
          }
        }
      }
    },
    "/inv-playbook/task/assign": {
      "post": {
        "description": "Assign a task to an owner",
        "summary": "Assign task",
        "operationId": "taskAssign",
        "parameters": [
          {
            "name": "invPlaybookAssignee",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/invPlaybookAssignee"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "InvestigationPlaybook",
            "schema": {
              "$ref": "#/definitions/InvestigationPlaybook"
            }
          }
        }
      }
    },
    "/inv-playbook/task/complete": {
      "post": {
        "description": "Complete a task with a file attachment\nDeprecated - use \"/v2/inv-playbook/task/complete\"",
        "consumes": [
          "multipart/form-data"
        ],
        "summary": "[Deprecated] Complete a task",
        "operationId": "completeTask",
        "parameters": [
          {
            "type": "string",
            "description": "investigation ID",
            "name": "investigationId",
            "in": "formData",
            "required": true
          },
          {
            "type": "string",
            "description": "file name",
            "name": "fileName",
            "in": "formData"
          },
          {
            "type": "string",
            "description": "file comment",
            "name": "fileComment",
            "in": "formData",
            "required": true
          },
          {
            "type": "string",
            "description": "Task Id",
            "name": "taskId",
            "in": "formData",
            "required": true
          },
          {
            "type": "string",
            "description": "task input",
            "name": "taskInput",
            "in": "formData",
            "required": true
          },
          {
            "type": "string",
            "description": "Version",
            "name": "version",
            "in": "formData",
            "required": true
          },
          {
            "type": "file",
            "description": "file",
            "name": "file",
            "in": "formData",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "InvestigationPlaybook",
            "schema": {
              "$ref": "#/definitions/InvestigationPlaybook"
            }
          }
        }
      }
    },
    "/inv-playbook/task/complete/simple": {
      "post": {
        "description": "Complete a task without a file attachment",
        "summary": "Complete task simple (no file)",
        "operationId": "simpleCompleteTask",
        "parameters": [
          {
            "name": "invTaskInfo",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/invTaskInfo"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "InvestigationPlaybook",
            "schema": {
              "$ref": "#/definitions/InvestigationPlaybook"
            }
          }
        }
      }
    },
    "/inv-playbook/task/delete/{investigationId}/{invPBTaskId}": {
      "post": {
        "description": "Delete an ad-hoc task from a running playbook",
        "summary": "Delete ad-hoc task",
        "operationId": "deleteAdHocTask",
        "parameters": [
          {
            "type": "string",
            "description": "investigation ID",
            "name": "investigationId",
            "in": "path",
            "required": true
          },
          {
            "type": "string",
            "description": "ad-hoc task ID",
            "name": "invPBTaskId",
            "in": "path",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "InvestigationPlaybook",
            "schema": {
              "$ref": "#/definitions/InvestigationPlaybook"
            }
          }
        }
      }
    },
    "/inv-playbook/task/due": {
      "post": {
        "description": "Set the task due date",
        "summary": "Set task due date",
        "operationId": "taskSetDue",
        "parameters": [
          {
            "name": "invPlaybookDue",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/invPlaybookDue"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "InvestigationPlaybook",
            "schema": {
              "$ref": "#/definitions/InvestigationPlaybook"
            }
          }
        }
      }
    },
    "/inv-playbook/task/edit/{investigationId}": {
      "post": {
        "description": "Edit an ad-hoc task in a running playbook",
        "summary": "Edit ad-hoc task",
        "operationId": "editAdHocTask",
        "parameters": [
          {
            "name": "InvPlaybookTaskData",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/InvPlaybookTaskData"
            }
          },
          {
            "type": "string",
            "description": "investigation ID",
            "name": "investigationId",
            "in": "path",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "InvestigationPlaybook",
            "schema": {
              "$ref": "#/definitions/InvestigationPlaybook"
            }
          }
        }
      }
    },
    "/inv-playbook/task/note/add": {
      "post": {
        "description": "Add comment to a task",
        "summary": "Task add comment",
        "operationId": "taskAddComment",
        "parameters": [
          {
            "name": "invTaskInfo",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/invTaskInfo"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "InvestigationPlaybook",
            "schema": {
              "$ref": "#/definitions/InvestigationPlaybook"
            }
          }
        }
      }
    },
    "/inv-playbook/task/uncomplete": {
      "post": {
        "description": "Reopen a closed task and change the status to uncomplete",
        "summary": "Un complete a task",
        "operationId": "taskUnComplete",
        "parameters": [
          {
            "name": "invTaskInfo",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/invTaskInfo"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "InvestigationPlaybook",
            "schema": {
              "$ref": "#/definitions/InvestigationPlaybook"
            }
          }
        }
      }
    },
    "/investigations/search": {
      "post": {
        "description": "This will search investigations across all indices\nYou can filter by multiple options",
        "summary": "Search investigations by filter",
        "operationId": "searchInvestigations",
        "parameters": [
          {
            "name": "filter",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/InvestigationFilter"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "investigationSearchResponse",
            "schema": {
              "$ref": "#/definitions/InvestigationSearchResponse"
            }
          }
        }
      }
    },
    "/report/{id}/{requestId}/execute": {
      "post": {
        "description": "Execute a new report",
        "summary": "Execute report",
        "operationId": "executeReport",
        "parameters": [
          {
            "type": "string",
            "description": "the ID of the report to get",
            "name": "id",
            "in": "path",
            "required": true
          },
          {
            "type": "string",
            "description": "the ID to register the request under",
            "name": "requestId",
            "in": "path",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "Request registered"
          }
        }
      }
    },
    "/reports": {
      "get": {
        "description": "Get all of the reports",
        "summary": "Get all reports",
        "operationId": "getAllReports",
        "responses": {
          "200": {
            "description": "Return array of reports",
            "schema": {
              "type": "array",
              "items": {
                "$ref": "#/definitions/Report"
              }
            }
          }
        }
      }
    },
    "/reports/{id}": {
      "get": {
        "description": "Get a report by its ID",
        "summary": "Get report by ID",
        "operationId": "getReportByID",
        "parameters": [
          {
            "type": "string",
            "description": "the ID of the report to get",
            "name": "id",
            "in": "path",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "Return a report",
            "schema": {
              "$ref": "#/definitions/Report"
            }
          }
        }
      }
    },
    "/reports/{id}/latest": {
      "get": {
        "description": "Get the latest report by its ID",
        "produces": [
          "application/octet-stream"
        ],
        "summary": "Get latest report by ID",
        "operationId": "downloadLatestReport",
        "parameters": [
          {
            "type": "string",
            "description": "the ID of the report to get",
            "name": "id",
            "in": "path",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "Return a report file",
            "schema": {
              "type": "file"
            }
          }
        }
      }
    },
    "/settings/audits": {
      "post": {
        "description": "Get audits by filter",
        "summary": "Get Audits",
        "operationId": "getAudits",
        "parameters": [
          {
            "name": "filter",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/GenericStringDateFilter"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "auditResult",
            "schema": {
              "$ref": "#/definitions/auditResult"
            }
          }
        }
      }
    },
    "/settings/docker-images": {
      "get": {
        "description": "Get list of all available docker image names",
        "summary": "Get Docker Images",
        "operationId": "getDockerImages",
        "responses": {
          "200": {
            "description": "dockerImagesResult",
            "schema": {
              "$ref": "#/definitions/dockerImagesResult"
            }
          }
        }
      },
      "post": {
        "description": "Create an image with a given list of dependencies",
        "summary": "Create Image",
        "operationId": "createDockerImage",
        "parameters": [
          {
            "name": "newDockerImage",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/newDockerImage"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "newDockerImageResult",
            "schema": {
              "$ref": "#/definitions/newDockerImageResult"
            }
          }
        }
      }
    },
    "/statistics/dashboards/query": {
      "post": {
        "description": "Get a given dashboard statistics result.",
        "produces": [
          "application/json"
        ],
        "summary": "Get Dashboard Statistics",
        "operationId": "GetStatsForDashboard",
        "responses": {
          "200": {
            "description": "Return an array of stats results for each widget cell in dashboard.",
            "schema": {
              "type": "array",
              "items": {
                "$ref": "#/definitions/StatsQueryResponse"
              }
            }
          }
        }
      }
    },
    "/statistics/widgets/query": {
      "post": {
        "description": "Get a given widget object statistics result.\nNote: This route has many return types based on the widget type and data. Each 200X represent a 200 OK request of specific widget type and data",
        "produces": [
          "application/json"
        ],
        "summary": "Get Widget Statistics",
        "operationId": "getStatsForWidget",
        "responses": {
          "200": {
            "description": "Response differ according to the widget type\n  -  Incident data type of a \"table\" or \"list\" widget returns incidentSearchResponse\n     total:\n       type: integer\n       data:\n         type: array\n      items:\n        \"$ref\": \"#/definitions/Incident\"\n    - Indicators data type of a \"table\" or \"list\" widget returns IoCsResponse\n      total:\n        type: integer\n      data:\n        type: array\n        items:\n          \"$ref\": \"#/definitions/IocObject\"\n    - Number widget returns a simple number\n      type: integer\n    - Trend widget returns a trend object\n      \"$ref\": \"#/definitions/StatsTrendsResponse\"\n    - Text widget returns a text object, describing the final text and the placeholders values.\n      \"$ref\": \"#/definitions/StatsTextResponse\"\n    - A chart data array by groups. When requesting a date, the key is the date string, according to the specified time frame. Empty groups (dates) are also returned.\n      type: array\n      items:\n        \"$ref\": \"#/definitions/Group\"",
            "schema": {
              "type": "object"
            }
          }
        }
      }
    },
    "/v2/inv-playbook/task/complete": {
      "post": {
        "description": "Complete a task with command and multiple file attachments",
        "consumes": [
          "multipart/form-data"
        ],
        "summary": "Complete a task",
        "operationId": "completeTaskV2",
        "parameters": [
          {
            "type": "string",
            "description": "investigation ID",
            "name": "investigationId",
            "in": "formData",
            "required": true
          },
          {
            "type": "string",
            "description": "Task Id",
            "name": "taskId",
            "in": "formData",
            "required": true
          },
          {
            "type": "string",
            "description": "Task comment or command to run",
            "name": "taskComment",
            "in": "formData"
          },
          {
            "type": "string",
            "description": "Task input",
            "name": "taskInput",
            "in": "formData",
            "required": true
          },
          {
            "type": "string",
            "description": "Version",
            "name": "version",
            "in": "formData",
            "required": true
          },
          {
            "type": "file",
            "description": "Files to attach to the task",
            "name": "file",
            "in": "formData",
            "required": true
          },
          {
            "type": "string",
            "description": "file names separated by %###% (only if files provided)",
            "name": "fileNames",
            "in": "formData"
          },
          {
            "type": "string",
            "description": "file comment separated by %###% (only if files provided)",
            "name": "fileComments",
            "in": "formData"
          }
        ],
        "responses": {
          "200": {
            "description": "InvestigationPlaybook",
            "schema": {
              "$ref": "#/definitions/InvestigationPlaybook"
            }
          }
        }
      }
    },
    "/v2/inv-playbook/task/form/submit": {
      "post": {
        "description": "Submit a data collection task with given answers and multiple file attachments",
        "consumes": [
          "multipart/form-data"
        ],
        "summary": "Complete a task",
        "operationId": "submitTaskForm",
        "parameters": [
          {
            "type": "string",
            "description": "investigation ID",
            "name": "investigationId",
            "in": "formData",
            "required": true
          },
          {
            "type": "string",
            "description": "Task Id",
            "name": "taskId",
            "in": "formData",
            "required": true
          },
          {
            "type": "file",
            "description": "the answers to the task form. Answers are keyed by numerical question id",
            "name": "answers",
            "in": "formData",
            "required": true
          },
          {
            "type": "file",
            "description": "Files to attach to the task",
            "name": "file",
            "in": "formData",
            "required": true
          },
          {
            "type": "string",
            "description": "file names separated by %###% (only if files provided)",
            "name": "fileNames",
            "in": "formData"
          },
          {
            "type": "string",
            "description": "file comment separated by %###% (only if files provided)",
            "name": "fileComments",
            "in": "formData"
          }
        ],
        "responses": {
          "200": {
            "description": "InvestigationPlaybook",
            "schema": {
              "$ref": "#/definitions/InvestigationPlaybook"
            }
          }
        }
      }
    },
    "/widgets": {
      "get": {
        "description": "Get all widgets",
        "produces": [
          "application/json"
        ],
        "operationId": "getAllWidgets",
        "responses": {
          "200": {
            "description": "Return all the widgets in the system.",
            "schema": {
              "type": "array",
              "items": {
                "$ref": "#/definitions/Widget"
              }
            }
          }
        }
      },
      "post": {
        "description": "Add or update a given widget based on Id.",
        "summary": "Add or update a widget",
        "operationId": "saveWidget",
        "parameters": [
          {
            "name": "widget",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/Widget"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "The saved widget newest version.",
            "schema": {
              "$ref": "#/definitions/Widget"
            }
          }
        }
      }
    },
    "/widgets/import": {
      "post": {
        "description": "Import a widget to the system, ignoring ID or version, used to import new widgets.",
        "summary": "Import a widget",
        "operationId": "importWidget",
        "parameters": [
          {
            "name": "widget",
            "in": "body",
            "schema": {
              "$ref": "#/definitions/Widget"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "The imported saved widget.",
            "schema": {
              "$ref": "#/definitions/Widget"
            }
          }
        }
      }
    },
    "/widgets/{id}": {
      "get": {
        "description": "Get a widget object by a given ID.",
        "produces": [
          "application/json"
        ],
        "summary": "Get widget by ID",
        "operationId": "getWidget",
        "parameters": [
          {
            "type": "string",
            "description": "The ID of widget to get.",
            "name": "id",
            "in": "path",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "Return the widget if found.",
            "schema": {
              "$ref": "#/definitions/Widget"
            }
          }
        }
      },
      "delete": {
        "description": "Remove a given widget Id from the system.",
        "summary": "Remove existing widget",
        "operationId": "deleteWidget",
        "parameters": [
          {
            "type": "string",
            "description": "Widget id to remove (returned from widget save or widgets get)",
            "name": "id",
            "in": "path",
            "required": true
          }
        ],
        "responses": {
          "200": {
            "description": "widget deleted"
          }
        }
      }
    }
  },
  "definitions": {
    "AdvanceArg": {
      "description": "Simple: plain text such as \"hello\" (constant) or ${File.ID} (DT expression)\nComplex: struct with all info that is necessary to compute argument value from context (Root, Filters, Accessor \u0026 Transformers)",
      "type": "object",
      "title": "AdvanceArg - advance argument can be one of the following:",
      "properties": {
        "complex": {
          "$ref": "#/definitions/ComplexArg"
        },
        "simple": {
          "type": "string",
          "x-go-name": "Simple"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "ArgAtomicFilter": {
      "description": "ArgAtomicFilter - operator with two sides that return true/false",
      "type": "object",
      "properties": {
        "ignoreCase": {
          "type": "boolean",
          "x-go-name": "IgnoreCase"
        },
        "left": {
          "$ref": "#/definitions/OperatorArgument"
        },
        "operator": {
          "$ref": "#/definitions/FilterOperatorID"
        },
        "right": {
          "$ref": "#/definitions/OperatorArgument"
        },
        "type": {
          "type": "string",
          "x-go-name": "Type"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "ArgFilter": {
      "description": "ArgFilter - represent a slice of atomic filters with OR condition between them (e.i. - atomic1 OR atomic2 OR ...)",
      "type": "array",
      "items": {
        "$ref": "#/definitions/ArgAtomicFilter"
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "ArgTransformer": {
      "type": "object",
      "title": "ArgTransformer ...",
      "properties": {
        "args": {
          "x-go-name": "Args"
        },
        "operator": {
          "$ref": "#/definitions/TransformerOperatorID"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Argument": {
      "description": "Argument to a module command",
      "type": "object",
      "properties": {
        "auto": {
          "type": "string",
          "x-go-name": "Auto"
        },
        "default": {
          "type": "boolean",
          "x-go-name": "Default"
        },
        "defaultValue": {
          "type": "string",
          "x-go-name": "DefaultValue"
        },
        "deprecated": {
          "type": "boolean",
          "x-go-name": "Deprecated"
        },
        "description": {
          "type": "string",
          "x-go-name": "Description"
        },
        "isArray": {
          "type": "boolean",
          "x-go-name": "IsArray"
        },
        "name": {
          "type": "string",
          "x-go-name": "Name"
        },
        "predefined": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Predefined"
        },
        "required": {
          "type": "boolean",
          "x-go-name": "Required"
        },
        "secret": {
          "type": "boolean",
          "x-go-name": "Secret"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "ArrayPositions": {
      "type": "array",
      "items": {
        "type": "integer",
        "format": "uint64"
      },
      "x-go-package": "github.com/demisto/server/vendor/github.com/blevesearch/bleve/search"
    },
    "Attachment": {
      "type": "object",
      "title": "Attachment ...",
      "properties": {
        "description": {
          "type": "string",
          "x-go-name": "Description"
        },
        "name": {
          "type": "string",
          "x-go-name": "Name"
        },
        "path": {
          "type": "string",
          "x-go-name": "Path"
        },
        "showMediaFile": {
          "type": "boolean",
          "x-go-name": "ShowMediaFile"
        },
        "type": {
          "type": "string",
          "x-go-name": "Type"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Audit": {
      "description": "Audit holds the auditing details. This includes all common fields, the action in a string blob and the user who\nperformed the action in a user struct.",
      "type": "object",
      "properties": {
        "action": {
          "type": "object",
          "additionalProperties": {
            "type": "object"
          },
          "x-go-name": "Action"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "identifier": {
          "type": "string",
          "x-go-name": "Identifier"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "object": {
          "type": "string",
          "x-go-name": "Object"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "type": {
          "type": "string",
          "x-go-name": "Type"
        },
        "user": {
          "type": "string",
          "x-go-name": "User"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "AutomationScript": {
      "description": "AutomationScript represents a script that will run on  the system",
      "type": "object",
      "properties": {
        "arguments": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/Argument"
          },
          "x-go-name": "Args"
        },
        "comment": {
          "type": "string",
          "x-go-name": "Comment"
        },
        "commitMessage": {
          "type": "string",
          "x-go-name": "CommitMessage"
        },
        "contextKeys": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "ContextKeys"
        },
        "dependsOn": {
          "description": "This fields indicates which commands this script depends on",
          "type": "object",
          "additionalProperties": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "x-go-name": "DependsOn"
        },
        "deprecated": {
          "type": "boolean",
          "x-go-name": "Deprecated"
        },
        "dockerImage": {
          "type": "string",
          "x-go-name": "DockerImage"
        },
        "enabled": {
          "type": "boolean",
          "x-go-name": "Enabled"
        },
        "hasRole": {
          "description": "Internal field to make queries on role faster",
          "type": "boolean",
          "x-go-name": "HasRole"
        },
        "hidden": {
          "type": "boolean",
          "x-go-name": "Hidden"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "important": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/Important"
          },
          "x-go-name": "Important"
        },
        "locked": {
          "type": "boolean",
          "x-go-name": "Locked"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "name": {
          "type": "string",
          "x-go-name": "Name"
        },
        "outputs": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/Output"
          },
          "x-go-name": "Outputs"
        },
        "prevName": {
          "type": "string",
          "x-go-name": "PrevName"
        },
        "previousRoles": {
          "description": "PreviousRoleName - do not change this field manually",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "PreviousRoleName"
        },
        "pswd": {
          "type": "string",
          "x-go-name": "Password"
        },
        "rawTags": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "RawTags"
        },
        "roles": {
          "description": "The role assigned to this investigation",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "RoleName"
        },
        "runAs": {
          "type": "string",
          "x-go-name": "RunAs"
        },
        "runOnce": {
          "type": "boolean",
          "x-go-name": "RunOnce"
        },
        "script": {
          "type": "string",
          "x-go-name": "Script"
        },
        "scriptTarget": {
          "$ref": "#/definitions/ScriptTarget"
        },
        "searchableName": {
          "type": "string",
          "x-go-name": "DoNotUseName"
        },
        "sensitive": {
          "type": "boolean",
          "x-go-name": "Sensitive"
        },
        "shouldCommit": {
          "type": "boolean",
          "x-go-name": "ShouldCommit"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "subtype": {
          "$ref": "#/definitions/ScriptSubType"
        },
        "system": {
          "type": "boolean",
          "x-go-name": "System"
        },
        "tags": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Tags"
        },
        "timeout": {
          "$ref": "#/definitions/Duration"
        },
        "type": {
          "$ref": "#/definitions/ScriptType"
        },
        "user": {
          "type": "string",
          "x-go-name": "User"
        },
        "vcShouldIgnore": {
          "type": "boolean",
          "x-go-name": "VCShouldIgnore"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        },
        "visualScript": {
          "type": "string",
          "x-go-name": "VisualScript"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "AutomationScriptAPI": {
      "type": "object",
      "title": "AutomationScriptAPI ...",
      "properties": {
        "arguments": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/Argument"
          },
          "x-go-name": "Args"
        },
        "comment": {
          "type": "string",
          "x-go-name": "Comment"
        },
        "contextKeys": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "ContextKeys"
        },
        "dependsOn": {
          "type": "object",
          "additionalProperties": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "x-go-name": "DependsOn"
        },
        "deprecated": {
          "type": "boolean",
          "x-go-name": "Deprecated"
        },
        "dockerImage": {
          "type": "string",
          "x-go-name": "DockerImage"
        },
        "enabled": {
          "type": "boolean",
          "x-go-name": "Enabled"
        },
        "hidden": {
          "type": "boolean",
          "x-go-name": "Hidden"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "locked": {
          "type": "boolean",
          "x-go-name": "Locked"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "name": {
          "type": "string",
          "x-go-name": "Name"
        },
        "outputs": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/Output"
          },
          "x-go-name": "Outputs"
        },
        "permitted": {
          "type": "boolean",
          "x-go-name": "Permitted"
        },
        "roles": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Roles"
        },
        "runAs": {
          "type": "string",
          "x-go-name": "RunAs"
        },
        "scriptTarget": {
          "$ref": "#/definitions/ScriptTarget"
        },
        "system": {
          "type": "boolean",
          "x-go-name": "System"
        },
        "tags": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Tags"
        },
        "type": {
          "$ref": "#/definitions/ScriptType"
        },
        "user": {
          "type": "string",
          "x-go-name": "User"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Version"
        }
      },
      "x-go-package": "github.com/demisto/server/services"
    },
    "ComplexArg": {
      "description": "ComplexArg - all info that is necessary to compute argument value from context\nRoot - the root slice (or object) from to work against\nFilters - a slice of filters to apply to the root object, one after another (e.i. with AND condition between each one)\nAccessor - the key to access to each result after filter\nTransformers - a slice to transformers to apply on the result of the accessed key from each result\ne.g. if user want to take from context all File.DisplayName where File.Extension is 'EXE', and the result in uppercase than:\nRoot: is \"File\"\nFilters: will hold the \"File.DisplayName where File.Extension is 'EXE'\" query\nAccessor: is \"DisplayName\"\nTransformers: will hold the uppercase transformation",
      "type": "object",
      "properties": {
        "accessor": {
          "type": "string",
          "x-go-name": "Accessor"
        },
        "filters": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/ArgFilter"
          },
          "x-go-name": "Filters"
        },
        "root": {
          "type": "string",
          "x-go-name": "Root"
        },
        "transformers": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/ArgTransformer"
          },
          "x-go-name": "Transformers"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "CreateIncidentRequest": {
      "description": "CreateIncidentRequest is an extension for Incident entity, with additional field of changed-status for the web client",
      "type": "object",
      "properties": {
        "ShardID": {
          "type": "integer",
          "format": "int64"
        },
        "account": {
          "description": "Account holds the tenant name so that slicing and dicing on the master can leverage bleve",
          "type": "string",
          "x-go-name": "Account"
        },
        "activated": {
          "description": "When was this activated",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Activated"
        },
        "activatingingUserId": {
          "description": "The user that activated this investigation",
          "type": "string",
          "x-go-name": "ActivatingUserID"
        },
        "autime": {
          "description": "AlmostUniqueTime is an attempt to have a unique sortable ID for an incident",
          "type": "integer",
          "format": "int64",
          "x-go-name": "AlmostUniqueTime"
        },
        "canvases": {
          "description": "Canvases of the incident",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Canvases"
        },
        "category": {
          "description": "Category",
          "type": "string",
          "x-go-name": "Category"
        },
        "closeNotes": {
          "description": "Notes for closing the incident",
          "type": "string",
          "x-go-name": "CloseNotes"
        },
        "closeReason": {
          "description": "The reason for closing the incident (select from existing predefined values)",
          "type": "string",
          "x-go-name": "ArchiveReason"
        },
        "closed": {
          "description": "When was this closed",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Closed"
        },
        "closingUserId": {
          "description": "The user ID that closed this investigation",
          "type": "string",
          "x-go-name": "ClosingUserID"
        },
        "createInvestigation": {
          "type": "boolean",
          "x-go-name": "CreateInvestigation"
        },
        "created": {
          "description": "When was this created",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Created"
        },
        "details": {
          "description": "The details of the incident - reason, etc.",
          "type": "string",
          "x-go-name": "Details"
        },
        "droppedCount": {
          "description": "DroppedCount ...",
          "type": "integer",
          "format": "int64",
          "x-go-name": "DroppedCount"
        },
        "dueDate": {
          "description": "SLA",
          "type": "string",
          "format": "date-time",
          "x-go-name": "DueDate"
        },
        "hasRole": {
          "description": "Internal field to make queries on role faster",
          "type": "boolean",
          "x-go-name": "HasRole"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "investigationId": {
          "description": "Investigation that was opened as a result of the incoming event",
          "type": "string",
          "x-go-name": "Investigation"
        },
        "isPlayground": {
          "description": "IsPlayGround",
          "type": "boolean",
          "x-go-name": "IsPlayGround"
        },
        "labels": {
          "description": "Labels related to incident - each label is composed of a type and value",
          "type": "array",
          "items": {
            "$ref": "#/definitions/Label"
          },
          "x-go-name": "Labels"
        },
        "lastOpen": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "LastOpen"
        },
        "linkedCount": {
          "description": "LinkedCount ...",
          "type": "integer",
          "format": "int64",
          "x-go-name": "LinkedCount"
        },
        "linkedIncidents": {
          "description": "LinkedIncidents incidents that were marked as linked by user",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "LinkedIncidents"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "name": {
          "description": "Incident Name - given by user",
          "type": "string",
          "x-go-name": "Name"
        },
        "notifyTime": {
          "description": "Incdicates when last this field was changed with a value that supposed to send a notification",
          "type": "string",
          "format": "date-time",
          "x-go-name": "NotifyTime"
        },
        "occurred": {
          "description": "When this incident has really occurred",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Occurred"
        },
        "openDuration": {
          "description": "Duration incident was open",
          "type": "integer",
          "format": "int64",
          "x-go-name": "OpenDuration"
        },
        "owner": {
          "description": "The user who owns this incident",
          "type": "string",
          "x-go-name": "OwnerID"
        },
        "parent": {
          "description": "Parent",
          "type": "string",
          "x-go-name": "Parent"
        },
        "phase": {
          "description": "Phase",
          "type": "string",
          "x-go-name": "Phase"
        },
        "playbookId": {
          "description": "The associated playbook for this incident",
          "type": "string",
          "x-go-name": "PlaybookID"
        },
        "previousRoles": {
          "description": "PreviousRoleName - do not change this field manually",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "PreviousRoleName"
        },
        "rawCategory": {
          "type": "string",
          "x-go-name": "RawCategory"
        },
        "rawCloseReason": {
          "description": "The reason for closing the incident (select from existing predefined values)",
          "type": "string",
          "x-go-name": "RawArchiveReason"
        },
        "rawJSON": {
          "type": "string",
          "x-go-name": "RawJSONData"
        },
        "rawName": {
          "description": "Incident RawName",
          "type": "string",
          "x-go-name": "RawName"
        },
        "rawPhase": {
          "description": "RawPhase",
          "type": "string",
          "x-go-name": "RawPhase"
        },
        "rawType": {
          "description": "Incident raw type",
          "type": "string",
          "x-go-name": "RawType"
        },
        "reason": {
          "description": "The reason for the resolve",
          "type": "string",
          "x-go-name": "Reason"
        },
        "reminder": {
          "description": "When if at all to send a reminder",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Reminder"
        },
        "roles": {
          "description": "The role assigned to this investigation",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "RoleName"
        },
        "runStatus": {
          "$ref": "#/definitions/RunStatus"
        },
        "severity": {
          "$ref": "#/definitions/Severity"
        },
        "sla": {
          "$ref": "#/definitions/SLAState"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "sourceBrand": {
          "description": "SourceBrand ...",
          "type": "string",
          "x-go-name": "SourceBrand"
        },
        "sourceInstance": {
          "description": "SourceInstance ...",
          "type": "string",
          "x-go-name": "SourceInstance"
        },
        "status": {
          "$ref": "#/definitions/IncidentStatus"
        },
        "type": {
          "description": "Incident type",
          "type": "string",
          "x-go-name": "Type"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        },
        "CustomFields": {
          "$ref": "#/definitions/CustomFields"
        }
      },
      "additionalProperties": {
        "type": "object"
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "CustomFields": {
      "description": "The keys should be the field's display name all lower and without spaces. For example: Scan IP -\u003e scanip\nTo get the actual key name you can also go to Demisto CLI and run /incident_add and look for the key that you would like to update",
      "type": "object",
      "title": "CustomFields ...",
      "additionalProperties": {
        "type": "object"
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "DBotScore": {
      "description": "DBotScore - Contain the score of a specific brand for a specific insight",
      "type": "object",
      "properties": {
        "content": {
          "type": "string",
          "x-go-name": "Content"
        },
        "contentFormat": {
          "type": "string",
          "x-go-name": "ContentFormat"
        },
        "context": {
          "type": "object",
          "additionalProperties": {
            "type": "object"
          },
          "x-go-name": "Context"
        },
        "isTypedIndicator": {
          "type": "boolean",
          "x-go-name": "IsTypedIndicator"
        },
        "score": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Score"
        },
        "scoreChangeTimestamp": {
          "description": "We need to track when the score changes to know if we need to re-calculate the overall score",
          "type": "string",
          "format": "date-time",
          "x-go-name": "ScoreChangeTimeStamp"
        },
        "timestamp": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "TimeStamp"
        },
        "type": {
          "type": "string",
          "x-go-name": "Type"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Dashboard": {
      "type": "object",
      "title": "Dashboard ...",
      "properties": {
        "commitMessage": {
          "type": "string",
          "x-go-name": "CommitMessage"
        },
        "fromDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromDate"
        },
        "fromDateLicense": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromDateLicenseVal"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "isCommon": {
          "type": "boolean",
          "x-go-name": "IsCommon"
        },
        "layout": {
          "$ref": "#/definitions/WidgetCells"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "name": {
          "type": "string",
          "x-go-name": "Name"
        },
        "owner": {
          "type": "string",
          "x-go-name": "Owner"
        },
        "period": {
          "$ref": "#/definitions/Period"
        },
        "prevName": {
          "type": "string",
          "x-go-name": "PrevName"
        },
        "shared": {
          "type": "boolean",
          "x-go-name": "Shared"
        },
        "shouldCommit": {
          "type": "boolean",
          "x-go-name": "ShouldCommit"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "system": {
          "type": "boolean",
          "x-go-name": "System"
        },
        "toDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "ToDate"
        },
        "vcShouldIgnore": {
          "type": "boolean",
          "x-go-name": "VCShouldIgnore"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "DataCollectionForm": {
      "type": "object",
      "title": "DataCollectionForm - a data collection form with questions.",
      "properties": {
        "description": {
          "type": "string",
          "x-go-name": "Description"
        },
        "expired": {
          "type": "boolean",
          "x-go-name": "Expired"
        },
        "questions": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/Question"
          },
          "x-go-name": "Questions"
        },
        "sender": {
          "type": "string",
          "x-go-name": "Sender"
        },
        "title": {
          "type": "string",
          "x-go-name": "Title"
        },
        "totalAnswers": {
          "type": "integer",
          "format": "uint64",
          "x-go-name": "TotalAnswers"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "DateRange": {
      "description": "DateRange provides common fields for date filtering",
      "type": "object",
      "properties": {
        "fromDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromDate"
        },
        "fromDateLicense": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromDateLicenseVal"
        },
        "period": {
          "$ref": "#/definitions/Period"
        },
        "toDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "ToDate"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "DateRangeFilter": {
      "description": "DateRangeFilter provides common fields for date filtering",
      "type": "object",
      "properties": {
        "fromDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromDate"
        },
        "fromDateLicense": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromDateLicenseVal"
        },
        "period": {
          "$ref": "#/definitions/Period"
        },
        "timeFrame": {
          "$ref": "#/definitions/Duration"
        },
        "toDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "ToDate"
        }
      },
      "x-go-package": "github.com/demisto/server/repo/entities"
    },
    "DownloadEntry": {
      "type": "object",
      "title": "DownloadEntry ...",
      "properties": {
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "investigationId": {
          "type": "string",
          "x-go-name": "InvestigationID"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "Duration": {
      "description": "A Duration represents the elapsed time between two instants\nas an int64 nanosecond count. The representation limits the\nlargest representable duration to approximately 290 years.",
      "type": "integer",
      "format": "int64",
      "x-go-package": "time"
    },
    "EndingType": {
      "description": "EndingType holds the type of schedule Ending",
      "type": "string",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Entry": {
      "description": "Entry holds a single entry in an investigation. Entries entered within a short amount of time by the same user are combined",
      "type": "object",
      "properties": {
        "ShardID": {
          "type": "integer",
          "format": "int64"
        },
        "brand": {
          "type": "string",
          "x-go-name": "Brand"
        },
        "category": {
          "$ref": "#/definitions/EntryCategory"
        },
        "contents": {
          "description": "The contents of the entry that is actually indexed - should not be used",
          "type": "object",
          "x-go-name": "DoNotUseContents"
        },
        "contentsSize": {
          "description": "ContentsSize the total size of the contents",
          "type": "integer",
          "format": "int64",
          "x-go-name": "ContentsSize"
        },
        "created": {
          "description": "When it was taken",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Created"
        },
        "cron": {
          "type": "string",
          "x-go-name": "Cron"
        },
        "cronView": {
          "type": "boolean",
          "x-go-name": "CronView"
        },
        "deleted": {
          "type": "boolean",
          "x-go-name": "Deleted"
        },
        "endingDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "EndingDate"
        },
        "endingType": {
          "$ref": "#/definitions/EndingType"
        },
        "entryTask": {
          "$ref": "#/definitions/EntryTask"
        },
        "errorSource": {
          "description": "Source of the error",
          "type": "string",
          "x-go-name": "ErrorSource"
        },
        "file": {
          "description": "Filename of associated content",
          "type": "string",
          "x-go-name": "File"
        },
        "fileID": {
          "description": "FileID is the file name when saved in the server",
          "type": "string",
          "x-go-name": "FileID"
        },
        "fileMetadata": {
          "$ref": "#/definitions/FileMetadata"
        },
        "format": {
          "description": "Holds information on how content is formatted",
          "type": "string",
          "x-go-name": "ContentsFormat"
        },
        "hasRole": {
          "description": "Internal field to make queries on role faster",
          "type": "boolean",
          "x-go-name": "HasRole"
        },
        "history": {
          "description": "Edit history",
          "type": "array",
          "items": {
            "$ref": "#/definitions/EntryHistory"
          },
          "x-go-name": "History"
        },
        "humanCron": {
          "$ref": "#/definitions/HumanCron"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "instance": {
          "type": "string",
          "x-go-name": "Instance"
        },
        "investigationId": {
          "description": "The id of the investigation it belongs to",
          "type": "string",
          "x-go-name": "InvestigationID"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "note": {
          "description": "Note",
          "type": "boolean",
          "x-go-name": "Note"
        },
        "parentContent": {
          "description": "ParentEntry content - for reference",
          "type": "object",
          "x-go-name": "ParentEntryContent"
        },
        "parentEntryTruncated": {
          "description": "ParentEntryTruncated - indicates weather entry content was truncated",
          "type": "boolean",
          "x-go-name": "ParentEntryTruncated"
        },
        "parentId": {
          "description": "ParentId is the ID of the parent entry",
          "type": "string",
          "x-go-name": "ParentID"
        },
        "pinned": {
          "description": "Mark entry as pinned = evidence",
          "type": "boolean",
          "x-go-name": "Pinned"
        },
        "playbookId": {
          "description": "PlaybookID - if the entry is assigned as note to a playbook task, it will hold the playbook",
          "type": "string",
          "x-go-name": "PlaybookID"
        },
        "previousRoles": {
          "description": "PreviousRoleName - do not change this field manually",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "PreviousRoleName"
        },
        "readOnly": {
          "description": "ReadOnly",
          "type": "boolean",
          "x-go-name": "ReadOnly"
        },
        "recurrent": {
          "type": "boolean",
          "x-go-name": "Recurrent"
        },
        "reputationSize": {
          "description": "ReputationSize the total size of the reputation",
          "type": "integer",
          "format": "int64",
          "x-go-name": "ReputationSize"
        },
        "reputations": {
          "description": "EntryReputations the reputations calculated by regex match",
          "type": "array",
          "items": {
            "$ref": "#/definitions/EntryReputation"
          },
          "x-go-name": "EntryReputations"
        },
        "roles": {
          "description": "The role assigned to this investigation",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "RoleName"
        },
        "scheduled": {
          "description": "is it scheduled",
          "type": "boolean",
          "x-go-name": "Scheduled"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "startDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "StartDate"
        },
        "system": {
          "description": "The name of the system associated with this entry",
          "type": "string",
          "x-go-name": "SystemName"
        },
        "tags": {
          "description": "Tags",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Tags"
        },
        "tagsRaw": {
          "description": "TagsRaw",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "TagsRaw"
        },
        "taskId": {
          "description": "TaskID - used if the entry is assigned as note to a playbook task",
          "type": "string",
          "x-go-name": "TaskID"
        },
        "times": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Times"
        },
        "timezoneOffset": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "TimezoneOffset"
        },
        "type": {
          "$ref": "#/definitions/EntryType"
        },
        "user": {
          "description": "The user who created  the entry",
          "type": "string",
          "x-go-name": "User"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "EntryCategory": {
      "type": "string",
      "title": "EntryCategory ...",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "EntryHistory": {
      "type": "object",
      "title": "EntryHistory ...",
      "properties": {
        "contentDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "ContentDate"
        },
        "contents": {
          "type": "string",
          "x-go-name": "Contents"
        },
        "contentsFormat": {
          "type": "string",
          "x-go-name": "ContentsFormat"
        },
        "user": {
          "type": "string",
          "x-go-name": "User"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "EntryReputation": {
      "description": "EntryReputation holds the entry reputations and the highlights",
      "type": "object",
      "properties": {
        "highlights": {
          "$ref": "#/definitions/FieldTermLocationMap"
        },
        "reputationsData": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/ReputationData"
          },
          "x-go-name": "ReputationsData"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "EntryTask": {
      "description": "EntryTask holds information regarding the related task",
      "type": "object",
      "properties": {
        "playbookName": {
          "type": "string",
          "x-go-name": "PlaybookName"
        },
        "taskId": {
          "type": "string",
          "x-go-name": "TaskID"
        },
        "taskName": {
          "type": "string",
          "x-go-name": "TaskName"
        },
        "taskStatus": {
          "type": "string",
          "x-go-name": "TaskStatus"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "EntryType": {
      "description": "EntryType specifies the type of the entry",
      "type": "number",
      "format": "double",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Evidence": {
      "type": "object",
      "title": "Evidence details.",
      "properties": {
        "ShardID": {
          "type": "integer",
          "format": "int64"
        },
        "description": {
          "description": "The description for the resolve",
          "type": "string",
          "x-go-name": "Description"
        },
        "entryId": {
          "description": "The entry ID",
          "type": "string",
          "x-go-name": "EntryID"
        },
        "fetched": {
          "description": "when the evidence entry was fetched",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Fetched"
        },
        "hasRole": {
          "description": "Internal field to make queries on role faster",
          "type": "boolean",
          "x-go-name": "HasRole"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "incidentId": {
          "description": "The incident ID",
          "type": "string",
          "x-go-name": "IncidentID"
        },
        "markedBy": {
          "description": "the user that marked this evidence",
          "type": "string",
          "x-go-name": "MarkedBy"
        },
        "markedDate": {
          "description": "when this evidence was marked",
          "type": "string",
          "format": "date-time",
          "x-go-name": "MarkedDate"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "occurred": {
          "description": "When this evidence has occurred",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Occurred"
        },
        "previousRoles": {
          "description": "PreviousRoleName - do not change this field manually",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "PreviousRoleName"
        },
        "roles": {
          "description": "The role assigned to this investigation",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "RoleName"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "tags": {
          "description": "Tags",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Tags"
        },
        "tagsRaw": {
          "description": "TagsRaw",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "TagsRaw"
        },
        "taskId": {
          "description": "when the evidence entry was fetched",
          "type": "string",
          "x-go-name": "TaskID"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        }
      },
      "additionalProperties": {
        "type": "object"
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "EvidenceData": {
      "description": "EvidenceData - all evidence properties to evaluate in task process",
      "type": "object",
      "properties": {
        "customFields": {
          "description": "This field must have empty json key",
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/AdvanceArg"
          },
          "x-go-name": "CustomFields"
        },
        "description": {
          "$ref": "#/definitions/AdvanceArg"
        },
        "occurred": {
          "$ref": "#/definitions/AdvanceArg"
        },
        "tags": {
          "$ref": "#/definitions/AdvanceArg"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Evidences": {
      "description": "Evidences is a list of evidence entities",
      "type": "array",
      "items": {
        "$ref": "#/definitions/Evidence"
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "EvidencesSearchResponse": {
      "description": "EvidencesSearchResponse returns the response from the evidences search",
      "type": "object",
      "properties": {
        "evidences": {
          "$ref": "#/definitions/Evidences"
        },
        "total": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Total"
        }
      },
      "x-go-package": "github.com/demisto/server/repo/entities"
    },
    "FieldGroup": {
      "description": "FieldGroup is the field group",
      "type": "number",
      "format": "double",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "FieldMapping": {
      "description": "FieldMapping - Map a task output (complex or simple value) to an incident field",
      "type": "object",
      "properties": {
        "fieldId": {
          "type": "string",
          "x-go-name": "IncidentField"
        },
        "output": {
          "$ref": "#/definitions/AdvanceArg"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "FieldTermLocationMap": {
      "type": "object",
      "additionalProperties": {
        "$ref": "#/definitions/TermLocationMap"
      },
      "x-go-package": "github.com/demisto/server/vendor/github.com/blevesearch/bleve/search"
    },
    "FileMetadata": {
      "type": "object",
      "title": "FileMetadata ...",
      "properties": {
        "info": {
          "type": "string",
          "x-go-name": "Info"
        },
        "isMediaFile": {
          "type": "boolean",
          "x-go-name": "IsMediaFile"
        },
        "md5": {
          "type": "string",
          "x-go-name": "MD5"
        },
        "sha1": {
          "type": "string",
          "x-go-name": "SHA1"
        },
        "sha256": {
          "type": "string",
          "x-go-name": "SHA256"
        },
        "sha512": {
          "type": "string",
          "x-go-name": "SHA512"
        },
        "size": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Size"
        },
        "ssdeep": {
          "type": "string",
          "x-go-name": "SSDeep"
        },
        "type": {
          "type": "string",
          "x-go-name": "Type"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "FilterCache": {
      "type": "object",
      "title": "FilterCache ...",
      "x-go-package": "github.com/demisto/server/repo/entities"
    },
    "FilterOperatorID": {
      "type": "string",
      "title": "FilterOperatorID ...",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "GenericStringDateFilter": {
      "description": "GenericStringDateFilter is a general filter that will fetch entities using the Query value and a date filter",
      "type": "object",
      "properties": {
        "Cache": {
          "description": "Cache of join functions",
          "type": "object",
          "additionalProperties": {
            "type": "array",
            "items": {
              "type": "string"
            }
          }
        },
        "fromDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromDate"
        },
        "fromDateLicense": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromDateLicenseVal"
        },
        "page": {
          "description": "0-based page",
          "type": "integer",
          "format": "int64",
          "x-go-name": "Page"
        },
        "period": {
          "$ref": "#/definitions/Period"
        },
        "query": {
          "type": "string",
          "x-go-name": "Query"
        },
        "searchAfter": {
          "description": "Efficient next page, pass max sort value from previous page",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SearchAfter"
        },
        "searchBefore": {
          "description": "Efficient prev page, pass min sort value from next page",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SearchBefore"
        },
        "size": {
          "description": "Size is limited to 1000, if not passed it defaults to 0, and no results will return",
          "type": "integer",
          "format": "int64",
          "x-go-name": "Size"
        },
        "sort": {
          "description": "The sort order",
          "type": "array",
          "items": {
            "$ref": "#/definitions/Order"
          },
          "x-go-name": "Sort"
        },
        "timeFrame": {
          "$ref": "#/definitions/Duration"
        },
        "toDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "ToDate"
        }
      },
      "x-go-package": "github.com/demisto/server/repo/entities"
    },
    "GenericStringFilter": {
      "description": "GenericStringFilter is a general filter that will fetch entities using the Query value",
      "type": "object",
      "properties": {
        "Cache": {
          "description": "Cache of join functions",
          "type": "object",
          "additionalProperties": {
            "type": "array",
            "items": {
              "type": "string"
            }
          }
        },
        "page": {
          "description": "0-based page",
          "type": "integer",
          "format": "int64",
          "x-go-name": "Page"
        },
        "query": {
          "type": "string",
          "x-go-name": "Query"
        },
        "searchAfter": {
          "description": "Efficient next page, pass max sort value from previous page",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SearchAfter"
        },
        "searchBefore": {
          "description": "Efficient prev page, pass min sort value from next page",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SearchBefore"
        },
        "size": {
          "description": "Size is limited to 1000, if not passed it defaults to 0, and no results will return",
          "type": "integer",
          "format": "int64",
          "x-go-name": "Size"
        },
        "sort": {
          "description": "The sort order",
          "type": "array",
          "items": {
            "$ref": "#/definitions/Order"
          },
          "x-go-name": "Sort"
        }
      },
      "x-go-package": "github.com/demisto/server/repo/entities"
    },
    "GridColumn": {
      "type": "object",
      "title": "GridColumn ...",
      "properties": {
        "displayName": {
          "type": "string",
          "x-go-name": "DisplayName"
        },
        "fieldCalcScript": {
          "type": "string",
          "x-go-name": "FieldCalcScript"
        },
        "isDefault": {
          "type": "boolean",
          "x-go-name": "IsDefault"
        },
        "isReadOnly": {
          "type": "boolean",
          "x-go-name": "IsReadOnly"
        },
        "key": {
          "type": "string",
          "x-go-name": "Key"
        },
        "required": {
          "type": "boolean",
          "x-go-name": "Required"
        },
        "script": {
          "type": "string",
          "x-go-name": "Script"
        },
        "selectValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SelectValues"
        },
        "type": {
          "type": "string",
          "x-go-name": "Type"
        },
        "width": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Width"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Group": {
      "type": "object",
      "title": "Group is the response that returns from a statistics query, describing a grouped value.",
      "properties": {
        "data": {
          "description": "The data value provided in array of integer values.",
          "type": "array",
          "items": {
            "type": "integer",
            "format": "int64"
          },
          "x-go-name": "Data"
        },
        "groups": {
          "$ref": "#/definitions/Groups"
        },
        "name": {
          "type": "string",
          "x-go-name": "Name"
        }
      },
      "x-go-package": "github.com/demisto/server/repo/entities"
    },
    "Groups": {
      "description": "Groups is a list of group entities",
      "type": "array",
      "items": {
        "$ref": "#/definitions/Group"
      },
      "x-go-package": "github.com/demisto/server/repo/entities"
    },
    "HumanCron": {
      "type": "object",
      "title": "HumanCron ...",
      "properties": {
        "atTimeHour": {
          "type": "string",
          "x-go-name": "AtTimeHour"
        },
        "atTimeMinute": {
          "type": "string",
          "x-go-name": "AtTimeMinute"
        },
        "days": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Days"
        },
        "hoursPeriod": {
          "type": "string",
          "x-go-name": "HoursPeriod"
        },
        "schedulingType": {
          "description": "the following fields are deprecated. do not use them.",
          "type": "string",
          "x-go-name": "SchedulingType"
        },
        "timePeriod": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "TimePeriod"
        },
        "timePeriodType": {
          "type": "string",
          "x-go-name": "TimePeriodType"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Important": {
      "description": "Important The important outputs of a given command",
      "type": "object",
      "properties": {
        "contextPath": {
          "type": "string",
          "x-go-name": "ContextPath"
        },
        "description": {
          "description": "Description is either a string or a map from string to interface",
          "type": "string",
          "x-go-name": "Description"
        },
        "related": {
          "description": "To what other context path this output is related",
          "type": "string",
          "x-go-name": "Related"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Incident": {
      "description": "An incident can be manually opened algorithmically or arrive from an external source like SIEM.\nIf you add fields, make sure to add them to the mapping as well.\nIf adding a user controlled field, please\nmake sure to add it to the CopyFrom  and getIncidentFieldString (in services package) methods.",
      "type": "object",
      "title": "Incident details.",
      "properties": {
        "ShardID": {
          "type": "integer",
          "format": "int64"
        },
        "account": {
          "description": "Account holds the tenant name so that slicing and dicing on the master can leverage bleve",
          "type": "string",
          "x-go-name": "Account"
        },
        "activated": {
          "description": "When was this activated",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Activated"
        },
        "activatingingUserId": {
          "description": "The user that activated this investigation",
          "type": "string",
          "x-go-name": "ActivatingUserID"
        },
        "attachment": {
          "description": "Attachments",
          "type": "array",
          "items": {
            "$ref": "#/definitions/Attachment"
          },
          "x-go-name": "Attachments"
        },
        "autime": {
          "description": "AlmostUniqueTime is an attempt to have a unique sortable ID for an incident",
          "type": "integer",
          "format": "int64",
          "x-go-name": "AlmostUniqueTime"
        },
        "canvases": {
          "description": "Canvases of the incident",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Canvases"
        },
        "category": {
          "description": "Category",
          "type": "string",
          "x-go-name": "Category"
        },
        "closeNotes": {
          "description": "Notes for closing the incident",
          "type": "string",
          "x-go-name": "CloseNotes"
        },
        "closeReason": {
          "description": "The reason for closing the incident (select from existing predefined values)",
          "type": "string",
          "x-go-name": "ArchiveReason"
        },
        "closed": {
          "description": "When was this closed",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Closed"
        },
        "closingUserId": {
          "description": "The user ID that closed this investigation",
          "type": "string",
          "x-go-name": "ClosingUserID"
        },
        "created": {
          "description": "When was this created",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Created"
        },
        "details": {
          "description": "The details of the incident - reason, etc.",
          "type": "string",
          "x-go-name": "Details"
        },
        "droppedCount": {
          "description": "DroppedCount ...",
          "type": "integer",
          "format": "int64",
          "x-go-name": "DroppedCount"
        },
        "dueDate": {
          "description": "SLA",
          "type": "string",
          "format": "date-time",
          "x-go-name": "DueDate"
        },
        "hasRole": {
          "description": "Internal field to make queries on role faster",
          "type": "boolean",
          "x-go-name": "HasRole"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "investigationId": {
          "description": "Investigation that was opened as a result of the incoming event",
          "type": "string",
          "x-go-name": "Investigation"
        },
        "isPlayground": {
          "description": "IsPlayGround",
          "type": "boolean",
          "x-go-name": "IsPlayGround"
        },
        "labels": {
          "description": "Labels related to incident - each label is composed of a type and value",
          "type": "array",
          "items": {
            "$ref": "#/definitions/Label"
          },
          "x-go-name": "Labels"
        },
        "lastOpen": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "LastOpen"
        },
        "linkedCount": {
          "description": "LinkedCount ...",
          "type": "integer",
          "format": "int64",
          "x-go-name": "LinkedCount"
        },
        "linkedIncidents": {
          "description": "LinkedIncidents incidents that were marked as linked by user",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "LinkedIncidents"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "name": {
          "description": "Incident Name - given by user",
          "type": "string",
          "x-go-name": "Name"
        },
        "notifyTime": {
          "description": "Incdicates when last this field was changed with a value that supposed to send a notification",
          "type": "string",
          "format": "date-time",
          "x-go-name": "NotifyTime"
        },
        "occurred": {
          "description": "When this incident has really occurred",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Occurred"
        },
        "openDuration": {
          "description": "Duration incident was open",
          "type": "integer",
          "format": "int64",
          "x-go-name": "OpenDuration"
        },
        "owner": {
          "description": "The user who owns this incident",
          "type": "string",
          "x-go-name": "OwnerID"
        },
        "parent": {
          "description": "Parent",
          "type": "string",
          "x-go-name": "Parent"
        },
        "phase": {
          "description": "Phase",
          "type": "string",
          "x-go-name": "Phase"
        },
        "playbookId": {
          "description": "The associated playbook for this incident",
          "type": "string",
          "x-go-name": "PlaybookID"
        },
        "previousRoles": {
          "description": "PreviousRoleName - do not change this field manually",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "PreviousRoleName"
        },
        "rawCategory": {
          "type": "string",
          "x-go-name": "RawCategory"
        },
        "rawCloseReason": {
          "description": "The reason for closing the incident (select from existing predefined values)",
          "type": "string",
          "x-go-name": "RawArchiveReason"
        },
        "rawJSON": {
          "type": "string",
          "x-go-name": "RawJSONData"
        },
        "rawName": {
          "description": "Incident RawName",
          "type": "string",
          "x-go-name": "RawName"
        },
        "rawPhase": {
          "description": "RawPhase",
          "type": "string",
          "x-go-name": "RawPhase"
        },
        "rawType": {
          "description": "Incident raw type",
          "type": "string",
          "x-go-name": "RawType"
        },
        "reason": {
          "description": "The reason for the resolve",
          "type": "string",
          "x-go-name": "Reason"
        },
        "reminder": {
          "description": "When if at all to send a reminder",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Reminder"
        },
        "roles": {
          "description": "The role assigned to this investigation",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "RoleName"
        },
        "runStatus": {
          "$ref": "#/definitions/RunStatus"
        },
        "severity": {
          "$ref": "#/definitions/Severity"
        },
        "sla": {
          "$ref": "#/definitions/SLAState"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "sourceBrand": {
          "description": "SourceBrand ...",
          "type": "string",
          "x-go-name": "SourceBrand"
        },
        "sourceInstance": {
          "description": "SourceInstance ...",
          "type": "string",
          "x-go-name": "SourceInstance"
        },
        "status": {
          "$ref": "#/definitions/IncidentStatus"
        },
        "type": {
          "description": "Incident type",
          "type": "string",
          "x-go-name": "Type"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        }
      },
      "additionalProperties": {
        "type": "object"
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "IncidentField": {
      "type": "object",
      "title": "IncidentField ...",
      "properties": {
        "associatedToAll": {
          "type": "boolean",
          "x-go-name": "AssociatedToAll"
        },
        "associatedTypes": {
          "description": "AssociatedTypes - list of incident (case) types IDs related to specific incident field",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "AssociatedTypes"
        },
        "breachScript": {
          "type": "string",
          "x-go-name": "BreachScript"
        },
        "caseInsensitive": {
          "type": "boolean",
          "x-go-name": "CaseInsensitive"
        },
        "cliName": {
          "type": "string",
          "x-go-name": "CliName"
        },
        "closeForm": {
          "type": "boolean",
          "x-go-name": "CloseForm"
        },
        "columns": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/GridColumn"
          },
          "x-go-name": "GridColumns"
        },
        "commitMessage": {
          "type": "string",
          "x-go-name": "CommitMessage"
        },
        "content": {
          "type": "boolean",
          "x-go-name": "Content"
        },
        "defaultRows": {
          "type": "array",
          "items": {
            "type": "object",
            "additionalProperties": {
              "type": "object"
            }
          },
          "x-go-name": "DefaultRows"
        },
        "description": {
          "type": "string",
          "x-go-name": "Description"
        },
        "editForm": {
          "type": "boolean",
          "x-go-name": "EditForm"
        },
        "fieldCalcScript": {
          "type": "string",
          "x-go-name": "FieldCalcScript"
        },
        "group": {
          "$ref": "#/definitions/FieldGroup"
        },
        "hidden": {
          "type": "boolean",
          "x-go-name": "Hidden"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "isReadOnly": {
          "type": "boolean",
          "x-go-name": "IsReadOnly"
        },
        "locked": {
          "type": "boolean",
          "x-go-name": "Locked"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "name": {
          "type": "string",
          "x-go-name": "Name"
        },
        "neverSetAsRequired": {
          "type": "boolean",
          "x-go-name": "NeverSetAsRequired"
        },
        "ownerOnly": {
          "type": "boolean",
          "x-go-name": "OwnerOnly"
        },
        "placeholder": {
          "type": "string",
          "x-go-name": "Placeholder"
        },
        "prevName": {
          "type": "string",
          "x-go-name": "PrevName"
        },
        "required": {
          "type": "boolean",
          "x-go-name": "Required"
        },
        "script": {
          "type": "string",
          "x-go-name": "Script"
        },
        "selectValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SelectValues"
        },
        "shouldCommit": {
          "type": "boolean",
          "x-go-name": "ShouldCommit"
        },
        "sla": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "SLA"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "system": {
          "type": "boolean",
          "x-go-name": "System"
        },
        "systemAssociatedTypes": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SystemAssociatedTypes"
        },
        "threshold": {
          "type": "number",
          "format": "double",
          "x-go-name": "Threshold"
        },
        "type": {
          "type": "string",
          "x-go-name": "Type"
        },
        "unmapped": {
          "type": "boolean",
          "x-go-name": "Unmapped"
        },
        "unsearchable": {
          "type": "boolean",
          "x-go-name": "UnSearchable"
        },
        "useAsKpi": {
          "type": "boolean",
          "x-go-name": "UseAsKpi"
        },
        "validatedError": {
          "type": "string",
          "x-go-name": "ValidatedError"
        },
        "validationRegex": {
          "type": "string",
          "x-go-name": "ValidationRegex"
        },
        "vcShouldIgnore": {
          "type": "boolean",
          "x-go-name": "VCShouldIgnore"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "IncidentFilter": {
      "type": "object",
      "title": "IncidentFilter allows for very simple filtering.",
      "properties": {
        "Cache": {
          "description": "Cache of join functions",
          "type": "object",
          "additionalProperties": {
            "type": "array",
            "items": {
              "type": "string"
            }
          }
        },
        "andOp": {
          "type": "boolean",
          "x-go-name": "AndOp"
        },
        "category": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Category"
        },
        "details": {
          "type": "string",
          "x-go-name": "Details"
        },
        "files": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Files"
        },
        "firstIncidentInPage": {
          "$ref": "#/definitions/IncidentWrapper"
        },
        "fromActivatedDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromActivatedDate"
        },
        "fromClosedDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromClosedDate"
        },
        "fromDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromDate"
        },
        "fromDateLicense": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromDateLicenseVal"
        },
        "fromDueDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromDueDate"
        },
        "fromReminder": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromReminder"
        },
        "id": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "ID"
        },
        "includeTmp": {
          "type": "boolean",
          "x-go-name": "IncludeTmp"
        },
        "investigation": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Investigation"
        },
        "lastIncidentInPage": {
          "$ref": "#/definitions/IncidentWrapper"
        },
        "level": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/Severity"
          },
          "x-go-name": "Level"
        },
        "name": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Name"
        },
        "nextPage": {
          "type": "boolean",
          "x-go-name": "NextPage"
        },
        "notCategory": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "NotCategory"
        },
        "notInvestigation": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "NotInvestigation"
        },
        "notStatus": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/IncidentStatus"
          },
          "x-go-name": "NotStatus"
        },
        "page": {
          "description": "0-based page",
          "type": "integer",
          "format": "int64",
          "x-go-name": "Page"
        },
        "parent": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Parent"
        },
        "period": {
          "$ref": "#/definitions/Period"
        },
        "query": {
          "type": "string",
          "x-go-name": "Query"
        },
        "reason": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Reason"
        },
        "searchAfter": {
          "description": "Efficient next page, pass max sort value from previous page",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SearchAfter"
        },
        "searchBefore": {
          "description": "Efficient prev page, pass min sort value from next page",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SearchBefore"
        },
        "sequentialPagesSearch": {
          "type": "boolean",
          "x-go-name": "SequentialPagesSearch"
        },
        "size": {
          "description": "Size is limited to 1000, if not passed it defaults to 0, and no results will return",
          "type": "integer",
          "format": "int64",
          "x-go-name": "Size"
        },
        "sort": {
          "description": "The sort order",
          "type": "array",
          "items": {
            "$ref": "#/definitions/Order"
          },
          "x-go-name": "Sort"
        },
        "status": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/IncidentStatus"
          },
          "x-go-name": "Status"
        },
        "systems": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Systems"
        },
        "timeFrame": {
          "$ref": "#/definitions/Duration"
        },
        "toActivatedDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "ToActivatedDate"
        },
        "toClosedDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "ToClosedDate"
        },
        "toDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "ToDate"
        },
        "toDueDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "ToDueDate"
        },
        "toReminder": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "ToReminder"
        },
        "totalOnly": {
          "type": "boolean",
          "x-go-name": "TotalOnly"
        },
        "type": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Type"
        },
        "urls": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Urls"
        },
        "users": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Users"
        }
      },
      "x-go-package": "github.com/demisto/server/repo/entities"
    },
    "IncidentSearchResponseWrapper": {
      "description": "IncidentSearchResponseWrapper is an extension for the IncidentSearchResponse type, which holds list of IncidentWrapper(s)",
      "type": "object",
      "properties": {
        "data": {
          "description": "in: body",
          "type": "array",
          "items": {
            "$ref": "#/definitions/IncidentWrapper"
          },
          "x-go-name": "Data"
        },
        "notUpdated": {
          "type": "integer",
          "format": "uint64",
          "x-go-name": "NotUpdated"
        },
        "total": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Total"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "IncidentStatus": {
      "description": "IncidentStatus is the status of the incident",
      "type": "number",
      "format": "double",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "IncidentType": {
      "type": "object",
      "title": "IncidentType ...",
      "properties": {
        "autorun": {
          "type": "boolean",
          "x-go-name": "IsAutoRun"
        },
        "closureScript": {
          "type": "string",
          "x-go-name": "ClosureScript"
        },
        "color": {
          "type": "string",
          "x-go-name": "Color"
        },
        "commitMessage": {
          "type": "string",
          "x-go-name": "CommitMessage"
        },
        "days": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Days"
        },
        "daysR": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "DaysReminder"
        },
        "default": {
          "type": "boolean",
          "x-go-name": "IsDefaultType"
        },
        "disabled": {
          "type": "boolean",
          "x-go-name": "Disabled"
        },
        "hours": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Hours"
        },
        "hoursR": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "HoursReminder"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "locked": {
          "type": "boolean",
          "x-go-name": "Locked"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "name": {
          "type": "string",
          "x-go-name": "Name"
        },
        "playbookId": {
          "type": "string",
          "x-go-name": "PlaybookID"
        },
        "preProcessingScript": {
          "type": "string",
          "x-go-name": "PreProcessingScript"
        },
        "prevName": {
          "type": "string",
          "x-go-name": "PrevName"
        },
        "readonly": {
          "type": "boolean",
          "x-go-name": "ReadOnly"
        },
        "reputationCalc": {
          "$ref": "#/definitions/ReputationCalcAlg"
        },
        "shouldCommit": {
          "type": "boolean",
          "x-go-name": "ShouldCommit"
        },
        "sla": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "SLA"
        },
        "slaReminder": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "SLAReminder"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "system": {
          "type": "boolean",
          "x-go-name": "System"
        },
        "vcShouldIgnore": {
          "type": "boolean",
          "x-go-name": "VCShouldIgnore"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        },
        "weeks": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Weeks"
        },
        "weeksR": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "WeeksReminder"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "IncidentWrapper": {
      "description": "IncidentWrapper is an extension of the Incident entity, which includes an additional field of changed-status for the web client",
      "type": "object",
      "properties": {
        "ShardID": {
          "type": "integer",
          "format": "int64"
        },
        "account": {
          "description": "Account holds the tenant name so that slicing and dicing on the master can leverage bleve",
          "type": "string",
          "x-go-name": "Account"
        },
        "activated": {
          "description": "When was this activated",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Activated"
        },
        "activatingingUserId": {
          "description": "The user that activated this investigation",
          "type": "string",
          "x-go-name": "ActivatingUserID"
        },
        "attachment": {
          "description": "Attachments",
          "type": "array",
          "items": {
            "$ref": "#/definitions/Attachment"
          },
          "x-go-name": "Attachments"
        },
        "autime": {
          "description": "AlmostUniqueTime is an attempt to have a unique sortable ID for an incident",
          "type": "integer",
          "format": "int64",
          "x-go-name": "AlmostUniqueTime"
        },
        "canvases": {
          "description": "Canvases of the incident",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Canvases"
        },
        "category": {
          "description": "Category",
          "type": "string",
          "x-go-name": "Category"
        },
        "changeStatus": {
          "type": "string",
          "x-go-name": "ChangeStatus"
        },
        "closeNotes": {
          "description": "Notes for closing the incident",
          "type": "string",
          "x-go-name": "CloseNotes"
        },
        "closeReason": {
          "description": "The reason for closing the incident (select from existing predefined values)",
          "type": "string",
          "x-go-name": "ArchiveReason"
        },
        "closed": {
          "description": "When was this closed",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Closed"
        },
        "closingUserId": {
          "description": "The user ID that closed this investigation",
          "type": "string",
          "x-go-name": "ClosingUserID"
        },
        "created": {
          "description": "When was this created",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Created"
        },
        "details": {
          "description": "The details of the incident - reason, etc.",
          "type": "string",
          "x-go-name": "Details"
        },
        "droppedCount": {
          "description": "DroppedCount ...",
          "type": "integer",
          "format": "int64",
          "x-go-name": "DroppedCount"
        },
        "dueDate": {
          "description": "SLA",
          "type": "string",
          "format": "date-time",
          "x-go-name": "DueDate"
        },
        "hasRole": {
          "description": "Internal field to make queries on role faster",
          "type": "boolean",
          "x-go-name": "HasRole"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "insights": {
          "type": "integer",
          "format": "uint64",
          "x-go-name": "Insights"
        },
        "investigationId": {
          "description": "Investigation that was opened as a result of the incoming event",
          "type": "string",
          "x-go-name": "Investigation"
        },
        "isPlayground": {
          "description": "IsPlayGround",
          "type": "boolean",
          "x-go-name": "IsPlayGround"
        },
        "labels": {
          "description": "Labels related to incident - each label is composed of a type and value",
          "type": "array",
          "items": {
            "$ref": "#/definitions/Label"
          },
          "x-go-name": "Labels"
        },
        "lastOpen": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "LastOpen"
        },
        "linkedCount": {
          "description": "LinkedCount ...",
          "type": "integer",
          "format": "int64",
          "x-go-name": "LinkedCount"
        },
        "linkedIncidents": {
          "description": "LinkedIncidents incidents that were marked as linked by user",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "LinkedIncidents"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "name": {
          "description": "Incident Name - given by user",
          "type": "string",
          "x-go-name": "Name"
        },
        "notifyTime": {
          "description": "Incdicates when last this field was changed with a value that supposed to send a notification",
          "type": "string",
          "format": "date-time",
          "x-go-name": "NotifyTime"
        },
        "occurred": {
          "description": "When this incident has really occurred",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Occurred"
        },
        "openDuration": {
          "description": "Duration incident was open",
          "type": "integer",
          "format": "int64",
          "x-go-name": "OpenDuration"
        },
        "owner": {
          "description": "The user who owns this incident",
          "type": "string",
          "x-go-name": "OwnerID"
        },
        "parent": {
          "description": "Parent",
          "type": "string",
          "x-go-name": "Parent"
        },
        "phase": {
          "description": "Phase",
          "type": "string",
          "x-go-name": "Phase"
        },
        "playbookId": {
          "description": "The associated playbook for this incident",
          "type": "string",
          "x-go-name": "PlaybookID"
        },
        "previousRoles": {
          "description": "PreviousRoleName - do not change this field manually",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "PreviousRoleName"
        },
        "rawCategory": {
          "type": "string",
          "x-go-name": "RawCategory"
        },
        "rawCloseReason": {
          "description": "The reason for closing the incident (select from existing predefined values)",
          "type": "string",
          "x-go-name": "RawArchiveReason"
        },
        "rawJSON": {
          "type": "string",
          "x-go-name": "RawJSONData"
        },
        "rawName": {
          "description": "Incident RawName",
          "type": "string",
          "x-go-name": "RawName"
        },
        "rawPhase": {
          "description": "RawPhase",
          "type": "string",
          "x-go-name": "RawPhase"
        },
        "rawType": {
          "description": "Incident raw type",
          "type": "string",
          "x-go-name": "RawType"
        },
        "reason": {
          "description": "The reason for the resolve",
          "type": "string",
          "x-go-name": "Reason"
        },
        "reminder": {
          "description": "When if at all to send a reminder",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Reminder"
        },
        "roles": {
          "description": "The role assigned to this investigation",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "RoleName"
        },
        "runStatus": {
          "$ref": "#/definitions/RunStatus"
        },
        "severity": {
          "$ref": "#/definitions/Severity"
        },
        "sla": {
          "$ref": "#/definitions/SLAState"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "sourceBrand": {
          "description": "SourceBrand ...",
          "type": "string",
          "x-go-name": "SourceBrand"
        },
        "sourceInstance": {
          "description": "SourceInstance ...",
          "type": "string",
          "x-go-name": "SourceInstance"
        },
        "status": {
          "$ref": "#/definitions/IncidentStatus"
        },
        "type": {
          "description": "Incident type",
          "type": "string",
          "x-go-name": "Type"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        }
      },
      "additionalProperties": {
        "type": "object"
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "IndicatorFilter": {
      "description": "IndicatorFilter is a general filter that fetches entities using a query string query using the Query value",
      "type": "object",
      "properties": {
        "Cache": {
          "description": "Cache of join functions",
          "type": "object",
          "additionalProperties": {
            "type": "array",
            "items": {
              "type": "string"
            }
          }
        },
        "earlyTimeInPage": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "EarlyTimeInPage"
        },
        "firstSeen": {
          "$ref": "#/definitions/DateRangeFilter"
        },
        "fromDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromDate"
        },
        "fromDateLicense": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromDateLicenseVal"
        },
        "lastSeen": {
          "$ref": "#/definitions/DateRangeFilter"
        },
        "laterTimeInPage": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "LaterTimeInPage"
        },
        "page": {
          "description": "0-based page",
          "type": "integer",
          "format": "int64",
          "x-go-name": "Page"
        },
        "period": {
          "$ref": "#/definitions/Period"
        },
        "prevPage": {
          "description": "MT support - these fields are for indicator search according to calculatedTime",
          "type": "boolean",
          "x-go-name": "PrevPage"
        },
        "query": {
          "type": "string",
          "x-go-name": "Query"
        },
        "searchAfter": {
          "description": "Efficient next page, pass max sort value from previous page",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SearchAfter"
        },
        "searchBefore": {
          "description": "Efficient prev page, pass min sort value from next page",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SearchBefore"
        },
        "size": {
          "description": "Size is limited to 1000, if not passed it defaults to 0, and no results will return",
          "type": "integer",
          "format": "int64",
          "x-go-name": "Size"
        },
        "sort": {
          "description": "The sort order",
          "type": "array",
          "items": {
            "$ref": "#/definitions/Order"
          },
          "x-go-name": "Sort"
        },
        "timeFrame": {
          "$ref": "#/definitions/Duration"
        },
        "toDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "ToDate"
        }
      },
      "x-go-package": "github.com/demisto/server/repo/entities"
    },
    "IndicatorResult": {
      "type": "object",
      "title": "IndicatorResult ...",
      "properties": {
        "iocObjects": {
          "$ref": "#/definitions/IocObjects"
        },
        "total": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Total"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "InsightCache": {
      "description": "InsightCache - map insight name to all its metadata, name will be case insensitive",
      "type": "object",
      "properties": {
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "scores": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/DBotScore"
          },
          "x-go-name": "Scores"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "InvPlaybookTaskCompleteData": {
      "type": "object",
      "title": "InvPlaybookTaskCompleteData ...",
      "properties": {
        "arguments": {
          "type": "object",
          "additionalProperties": {
            "type": "object"
          },
          "x-go-name": "Arguments"
        },
        "completedBy": {
          "type": "string",
          "x-go-name": "CompletedBy"
        },
        "completedCount": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "CompletedCount"
        },
        "completedDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "CompletedDate"
        },
        "entries": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Entries"
        },
        "input": {
          "type": "string",
          "x-go-name": "Input"
        },
        "outputs": {
          "type": "object",
          "additionalProperties": {
            "type": "object"
          },
          "x-go-name": "Outputs"
        },
        "playbookInputs": {
          "type": "object",
          "additionalProperties": {
            "type": "object"
          },
          "x-go-name": "PlaybookInputs"
        },
        "startDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "StartDate"
        },
        "state": {
          "$ref": "#/definitions/TaskState"
        },
        "willNotExecuteCount": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "WillNotExecuteCount"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "InvPlaybookTaskData": {
      "type": "object",
      "title": "InvPlaybookTaskData ...",
      "properties": {
        "addAfter": {
          "type": "boolean",
          "x-go-name": "AddAfter"
        },
        "automationScript": {
          "type": "string",
          "x-go-name": "AutomationScript"
        },
        "description": {
          "type": "string",
          "x-go-name": "Description"
        },
        "name": {
          "type": "string",
          "x-go-name": "Name"
        },
        "neighborInvPBTaskId": {
          "type": "string",
          "x-go-name": "NeighborInvPBTaskID"
        },
        "scriptArguments": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/AdvanceArg"
          },
          "x-go-name": "ScriptArguments"
        },
        "tags": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Tags"
        }
      },
      "x-go-package": "github.com/demisto/server/services"
    },
    "Investigation": {
      "description": "A special investigation called playground is created for each user-project combination and is a private space for the researcher to play in.",
      "type": "object",
      "title": "Investigation contains the investigation of a particular incident.",
      "properties": {
        "ShardID": {
          "type": "integer",
          "format": "int64"
        },
        "category": {
          "description": "Category of the investigation",
          "type": "string",
          "x-go-name": "Category"
        },
        "childInvestigations": {
          "description": "ChildInvestigations id's",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "ChildInvestigations"
        },
        "closed": {
          "description": "When was this closed",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Closed"
        },
        "closingUserId": {
          "description": "The user ID that closed this investigation",
          "type": "string",
          "x-go-name": "ClosingUserID"
        },
        "created": {
          "description": "When was this created",
          "type": "string",
          "format": "date-time",
          "x-go-name": "Created"
        },
        "creatingUserId": {
          "description": "The user ID that created this investigation",
          "type": "string",
          "x-go-name": "CreatingUserID"
        },
        "details": {
          "description": "User defined free text details",
          "type": "string",
          "x-go-name": "Details"
        },
        "entitlements": {
          "description": "One time entitlements",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Entitlements"
        },
        "entryUsers": {
          "description": "EntryUsers",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "EntryUsers"
        },
        "hasRole": {
          "description": "Internal field to make queries on role faster",
          "type": "boolean",
          "x-go-name": "HasRole"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "isChildInvestigation": {
          "description": "IsChildInvestigation",
          "type": "boolean",
          "x-go-name": "IsChildInvestigation"
        },
        "lastOpen": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "LastOpen"
        },
        "mirrorAutoClose": {
          "description": "MirrorAutoClose will tell us to close the Chat Module channel if we close investigation",
          "type": "object",
          "additionalProperties": {
            "type": "boolean"
          },
          "x-go-name": "MirrorAutoClose"
        },
        "mirrorTypes": {
          "description": "MirrorTypes holds info about mirror direction and message type to be mirrored\nmessage type can be either 'all' or 'chat'\ndirection can be either 'FromDemisto', 'ToDemisto' or 'Both' if this investigation is mirrored",
          "type": "object",
          "additionalProperties": {
            "type": "string"
          },
          "x-go-name": "MirrorTypes"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "name": {
          "description": "The name of the investigation, which is unique to the project",
          "type": "string",
          "x-go-name": "Name"
        },
        "openDuration": {
          "description": "Duration from open to close time",
          "type": "integer",
          "format": "int64",
          "x-go-name": "OpenDuration"
        },
        "parentInvestigation": {
          "description": "ParentInvestigation - parent id, in case this is a child investigation of another investigation",
          "type": "string",
          "x-go-name": "ParentInvestigation"
        },
        "persistentEntitlements": {
          "description": "Persistent entitlement per tag. Empty tag will also return an entitlement",
          "type": "object",
          "additionalProperties": {
            "type": "string"
          },
          "x-go-name": "PersistentEntitlements"
        },
        "previousRoles": {
          "description": "PreviousRoleName - do not change this field manually",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "PreviousRoleName"
        },
        "rawCategory": {
          "type": "string",
          "x-go-name": "RawCategory"
        },
        "reason": {
          "description": "The reason for the status (resolve)",
          "type": "object",
          "additionalProperties": {
            "type": "string"
          },
          "x-go-name": "Reason"
        },
        "roles": {
          "description": "The role assigned to this investigation",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "RoleName"
        },
        "runStatus": {
          "$ref": "#/definitions/RunStatus"
        },
        "slackMirrorAutoClose": {
          "description": "DEPRECATED - DeprecatedSlackMirrorAutoClose will tell us to close the Slack channel if we close investigation",
          "type": "boolean",
          "x-go-name": "DeprecatedSlackMirrorAutoClose"
        },
        "slackMirrorType": {
          "description": "DEPRECATED - DeprecatedSlackMirrorType holds info about mirror direction and message type to be mirror\nmessage type can be either 'all' or 'chat'\ndirection can be either 'demisto2Slack', 'slack2Demisto' or 'both' if this investigation is mirrored to Slack",
          "type": "string",
          "x-go-name": "DeprecatedSlackMirrorType"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "status": {
          "$ref": "#/definitions/InvestigationStatus"
        },
        "systems": {
          "description": "The systems involved",
          "type": "array",
          "items": {
            "$ref": "#/definitions/System"
          },
          "x-go-name": "Systems"
        },
        "tags": {
          "description": "Tags",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Tags"
        },
        "type": {
          "$ref": "#/definitions/InvestigationType"
        },
        "users": {
          "description": "The users who share this investigation",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Users"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "InvestigationFilter": {
      "type": "object",
      "title": "InvestigationFilter allows for very simple filtering.",
      "properties": {
        "Cache": {
          "description": "Cache of join functions",
          "type": "object",
          "additionalProperties": {
            "type": "array",
            "items": {
              "type": "string"
            }
          }
        },
        "andOp": {
          "type": "boolean",
          "x-go-name": "AndOp"
        },
        "category": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Category"
        },
        "fromCloseDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromCloseDate"
        },
        "fromDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromDate"
        },
        "fromDateLicense": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FromDateLicenseVal"
        },
        "id": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "ID"
        },
        "idsOnly": {
          "type": "boolean",
          "x-go-name": "IdsOnly"
        },
        "includeChildInv": {
          "type": "boolean",
          "x-go-name": "IncludeChildInv"
        },
        "name": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Name"
        },
        "notCategory": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "NotCategory"
        },
        "notIDs": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "NotIDs"
        },
        "page": {
          "description": "0-based page",
          "type": "integer",
          "format": "int64",
          "x-go-name": "Page"
        },
        "period": {
          "$ref": "#/definitions/Period"
        },
        "reason": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Reason"
        },
        "searchAfter": {
          "description": "Efficient next page, pass max sort value from previous page",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SearchAfter"
        },
        "searchBefore": {
          "description": "Efficient prev page, pass min sort value from next page",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SearchBefore"
        },
        "size": {
          "description": "Size is limited to 1000, if not passed it defaults to 0, and no results will return",
          "type": "integer",
          "format": "int64",
          "x-go-name": "Size"
        },
        "sort": {
          "description": "The sort order",
          "type": "array",
          "items": {
            "$ref": "#/definitions/Order"
          },
          "x-go-name": "Sort"
        },
        "status": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/InvestigationStatus"
          },
          "x-go-name": "Status"
        },
        "timeFrame": {
          "$ref": "#/definitions/Duration"
        },
        "toCloseDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "ToCloseDate"
        },
        "toDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "ToDate"
        },
        "type": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/InvestigationType"
          },
          "x-go-name": "Type"
        },
        "user": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "User"
        }
      },
      "x-go-package": "github.com/demisto/server/repo/entities"
    },
    "InvestigationPlaybook": {
      "description": "InvestigationPlaybook is a wrapper for a linked list of Playbook tasks",
      "type": "object",
      "properties": {
        "Dirty": {
          "type": "boolean"
        },
        "ReadyPlaybookInputs": {
          "type": "object",
          "additionalProperties": {
            "type": "object",
            "additionalProperties": {
              "type": "object"
            }
          }
        },
        "ReplacedPlaybook": {
          "description": "Indicate whether this playbook has new history during this session",
          "type": "boolean"
        },
        "ShardID": {
          "type": "integer",
          "format": "int64"
        },
        "UpdatedOperatorIDs": {
          "type": "boolean"
        },
        "autoExtracting": {
          "type": "boolean",
          "x-go-name": "AutoExtracting"
        },
        "comment": {
          "type": "string",
          "x-go-name": "Description"
        },
        "hasRole": {
          "description": "Internal field to make queries on role faster",
          "type": "boolean",
          "x-go-name": "HasRole"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "incidentCreateDate": {
          "description": "Incident create date",
          "type": "string",
          "format": "date-time",
          "x-go-name": "IncidentCreateDate"
        },
        "inputs": {
          "$ref": "#/definitions/PlaybookInputs"
        },
        "investigationId": {
          "type": "string",
          "x-go-name": "InvestigationID"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "name": {
          "type": "string",
          "x-go-name": "Name"
        },
        "outputs": {
          "$ref": "#/definitions/PlaybookOutputs"
        },
        "pbHistory": {
          "description": "in: body",
          "type": "array",
          "items": {
            "$ref": "#/definitions/InvestigationPlaybookData"
          },
          "x-go-name": "PbHistory"
        },
        "playbookId": {
          "type": "string",
          "x-go-name": "PlaybookID"
        },
        "previousRoles": {
          "description": "PreviousRoleName - do not change this field manually",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "PreviousRoleName"
        },
        "roles": {
          "description": "The role assigned to this investigation",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "RoleName"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "startDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "StartDate"
        },
        "startTaskId": {
          "description": "FirstTask is the root task of the playbook",
          "type": "string",
          "x-go-name": "StartTaskID"
        },
        "state": {
          "$ref": "#/definitions/InvestigationPlaybookState"
        },
        "subPlaybookInputs": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/PlaybookInputs"
          },
          "x-go-name": "SubPlaybookInputs"
        },
        "subPlaybookOutputs": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/PlaybookOutputs"
          },
          "x-go-name": "SubPlaybookOutputs"
        },
        "tasks": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/InvestigationPlaybookTask"
          },
          "x-go-name": "Tasks"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        },
        "view": {
          "$ref": "#/definitions/PlaybookView"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "InvestigationPlaybookData": {
      "description": "InvestigationPlaybookData returns all data of an investigation playbook, not including history",
      "type": "object",
      "properties": {
        "ReadyPlaybookInputs": {
          "type": "object",
          "additionalProperties": {
            "type": "object",
            "additionalProperties": {
              "type": "object"
            }
          }
        },
        "autoExtracting": {
          "type": "boolean",
          "x-go-name": "AutoExtracting"
        },
        "comment": {
          "type": "string",
          "x-go-name": "Description"
        },
        "inputs": {
          "$ref": "#/definitions/PlaybookInputs"
        },
        "investigationId": {
          "type": "string",
          "x-go-name": "InvestigationID"
        },
        "name": {
          "type": "string",
          "x-go-name": "Name"
        },
        "outputs": {
          "$ref": "#/definitions/PlaybookOutputs"
        },
        "playbookId": {
          "type": "string",
          "x-go-name": "PlaybookID"
        },
        "startDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "StartDate"
        },
        "startTaskId": {
          "description": "FirstTask is the root task of the playbook",
          "type": "string",
          "x-go-name": "StartTaskID"
        },
        "state": {
          "$ref": "#/definitions/InvestigationPlaybookState"
        },
        "subPlaybookInputs": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/PlaybookInputs"
          },
          "x-go-name": "SubPlaybookInputs"
        },
        "subPlaybookOutputs": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/PlaybookOutputs"
          },
          "x-go-name": "SubPlaybookOutputs"
        },
        "tasks": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/InvestigationPlaybookTask"
          },
          "x-go-name": "Tasks"
        },
        "view": {
          "$ref": "#/definitions/PlaybookView"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "InvestigationPlaybookState": {
      "description": "InvestigationPlaybookState indicates the state of the running playbook",
      "type": "string",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "InvestigationPlaybookTask": {
      "description": "InvestigationPlaybookTask is the Task in the playbook context as a node",
      "type": "object",
      "properties": {
        "arguments": {
          "type": "object",
          "additionalProperties": {
            "type": "object"
          },
          "x-go-name": "Arguments"
        },
        "assignee": {
          "type": "string",
          "x-go-name": "Assignee"
        },
        "assigneeSet": {
          "type": "boolean",
          "x-go-name": "AssigneeSet"
        },
        "blockingTasks": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "BlockingTasks"
        },
        "comments": {
          "description": "Whether this task had any comments or not",
          "type": "boolean",
          "x-go-name": "Comments"
        },
        "completedBy": {
          "type": "string",
          "x-go-name": "CompletedBy"
        },
        "completedCount": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "CompletedCount"
        },
        "completedDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "CompletedDate"
        },
        "conditions": {
          "description": "Conditions - optional list of conditions to run when task is conditional. we check conditions by their order (e.i. - considering the first one that satisfied)",
          "type": "array",
          "items": {
            "$ref": "#/definitions/TaskCondition"
          },
          "x-go-name": "Conditions"
        },
        "continueOnError": {
          "type": "boolean",
          "x-go-name": "ContinueOnError"
        },
        "defaultAssignee": {
          "type": "string",
          "x-go-name": "DefaultAssignee"
        },
        "defaultAssigneeComplex": {
          "$ref": "#/definitions/AdvanceArg"
        },
        "defaultReminder": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "DefaultReminder"
        },
        "dueDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "DueDate"
        },
        "dueDateSet": {
          "type": "boolean",
          "x-go-name": "DueDateSet"
        },
        "entries": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Entries"
        },
        "evidenceData": {
          "$ref": "#/definitions/EvidenceData"
        },
        "executionCount": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "ExecutionCount"
        },
        "fieldMapping": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/FieldMapping"
          },
          "x-go-name": "FieldMappingArray"
        },
        "forEachIndex": {
          "description": "Parameters needed for loops",
          "type": "integer",
          "format": "int64",
          "x-go-name": "ForEachIndex"
        },
        "forEachInputs": {
          "type": "object",
          "additionalProperties": {
            "type": "array",
            "items": {
              "type": "object"
            }
          },
          "x-go-name": "ForEachInputs"
        },
        "form": {
          "$ref": "#/definitions/DataCollectionForm"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "ignoreWorker": {
          "description": "Do not run this task in a worker",
          "type": "boolean",
          "x-go-name": "IgnoreWorker"
        },
        "indent": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Indent"
        },
        "input": {
          "type": "string",
          "x-go-name": "Input"
        },
        "loop": {
          "$ref": "#/definitions/TaskLoop"
        },
        "message": {
          "$ref": "#/definitions/NotifiableItem"
        },
        "nextTasks": {
          "type": "object",
          "additionalProperties": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "x-go-name": "NextTasks"
        },
        "note": {
          "type": "boolean",
          "x-go-name": "Note"
        },
        "outputs": {
          "type": "object",
          "additionalProperties": {
            "type": "object"
          },
          "x-go-name": "Outputs"
        },
        "parentBlockCount": {
          "description": "the number of tasks that are waiting on blocked in subplaybooks of this task",
          "type": "integer",
          "format": "int64",
          "x-go-name": "ParentBlockCount"
        },
        "parentPlaybookID": {
          "type": "string",
          "x-go-name": "ParentPlaybookTaskID"
        },
        "patched": {
          "description": "Indicates whether this task was patched to InvPB and did not originally belong to the playbook",
          "type": "boolean",
          "x-go-name": "Patched"
        },
        "playbookInputs": {
          "type": "object",
          "additionalProperties": {
            "type": "object"
          },
          "x-go-name": "PlaybookInputs"
        },
        "previousTasks": {
          "type": "object",
          "additionalProperties": {
            "type": "array",
            "items": {
              "type": "string"
            }
          },
          "x-go-name": "PreviousTasks"
        },
        "reminder": {
          "description": "Duration in minutes, this field is not persisted here",
          "type": "integer",
          "format": "int64",
          "x-go-name": "Reminder"
        },
        "reputationCalc": {
          "$ref": "#/definitions/ReputationCalcAlg"
        },
        "restrictedCompletion": {
          "type": "boolean",
          "x-go-name": "RestrictedCompletion"
        },
        "scriptArguments": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/AdvanceArg"
          },
          "x-go-name": "ScriptArguments"
        },
        "separateContext": {
          "type": "boolean",
          "x-go-name": "SeparateContext"
        },
        "sla": {
          "$ref": "#/definitions/SLA"
        },
        "slaReminder": {
          "$ref": "#/definitions/SLA"
        },
        "startDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "StartDate"
        },
        "state": {
          "$ref": "#/definitions/TaskState"
        },
        "subPlaybook": {
          "$ref": "#/definitions/InvestigationPlaybook"
        },
        "task": {
          "$ref": "#/definitions/Task"
        },
        "taskCompleteData": {
          "description": "History complete data",
          "type": "array",
          "items": {
            "$ref": "#/definitions/InvPlaybookTaskCompleteData"
          },
          "x-go-name": "TaskCompleteData"
        },
        "taskId": {
          "type": "string",
          "x-go-name": "TaskID"
        },
        "timerTriggers": {
          "description": "SLA fields",
          "type": "array",
          "items": {
            "$ref": "#/definitions/TimerTrigger"
          },
          "x-go-name": "TimerTriggers"
        },
        "type": {
          "$ref": "#/definitions/TaskType"
        },
        "view": {
          "$ref": "#/definitions/TaskView"
        },
        "willNotExecuteCount": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "WillNotExecuteCount"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "InvestigationPlaybookTasksAPI": {
      "description": "InvestigationPlaybookTasksAPI is the wrapper around an investigation task and it's parent inv id",
      "type": "object",
      "properties": {
        "ancestors": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "PlaybookAncestorNames"
        },
        "incSeverity": {
          "$ref": "#/definitions/Severity"
        },
        "invId": {
          "type": "string",
          "x-go-name": "InvestigationID"
        },
        "invName": {
          "type": "string",
          "x-go-name": "InvestigationName"
        },
        "task": {
          "$ref": "#/definitions/InvestigationPlaybookTask"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "InvestigationSearchResponse": {
      "description": "InvestigationSearchResponse returns the response from the investigation search",
      "type": "object",
      "properties": {
        "data": {
          "description": "in: body",
          "type": "array",
          "items": {
            "$ref": "#/definitions/Investigation"
          },
          "x-go-name": "Data"
        },
        "total": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Total"
        }
      },
      "x-go-package": "github.com/demisto/server/repo/entities"
    },
    "InvestigationStatus": {
      "description": "InvestigationStatus is the status type",
      "type": "number",
      "format": "double",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "InvestigationType": {
      "type": "number",
      "format": "double",
      "title": "InvestigationType ...",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Investigations": {
      "description": "Investigations is a slice of investigation",
      "type": "array",
      "items": {
        "$ref": "#/definitions/Investigation"
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "IocObject": {
      "description": "IocObject - represents an Ioc (or simply an indicator) object",
      "type": "object",
      "properties": {
        "CustomFields": {
          "$ref": "#/definitions/CustomFields"
        },
        "account": {
          "type": "string",
          "x-go-name": "Account"
        },
        "calculatedTime": {
          "description": "Do not set the fields bellow this line",
          "type": "string",
          "format": "date-time",
          "x-go-name": "CalculatedTime"
        },
        "comment": {
          "type": "string",
          "x-go-name": "Comment"
        },
        "firstSeen": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "FirstSeen"
        },
        "firstSeenEntryID": {
          "type": "string",
          "x-go-name": "FirstSeenEntryID"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "indicator_type": {
          "type": "string",
          "x-go-name": "IndicatorType"
        },
        "insightCache": {
          "$ref": "#/definitions/InsightCache"
        },
        "investigationIDs": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "InvestigationIDs"
        },
        "lastReputationRun": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "LastReputationRun"
        },
        "lastSeen": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "LastSeen"
        },
        "lastSeenEntryID": {
          "type": "string",
          "x-go-name": "LastSeenEntryID"
        },
        "manualScore": {
          "type": "boolean",
          "x-go-name": "ManualScore"
        },
        "manualSetTime": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "ManualSetTime"
        },
        "manuallyEditedFields": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "ManuallyEditedFields"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "score": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Score"
        },
        "setBy": {
          "type": "string",
          "x-go-name": "SetBy"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "source": {
          "type": "string",
          "x-go-name": "Source"
        },
        "timestamp": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "TimeStamp"
        },
        "value": {
          "type": "string",
          "x-go-name": "Value"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "IocObjects": {
      "type": "array",
      "title": "IocObjects ...",
      "items": {
        "$ref": "#/definitions/IocObject"
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Label": {
      "type": "object",
      "title": "Label ...",
      "properties": {
        "type": {
          "type": "string",
          "x-go-name": "Type"
        },
        "value": {
          "type": "string",
          "x-go-name": "Value"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Location": {
      "type": "object",
      "properties": {
        "array_positions": {
          "$ref": "#/definitions/ArrayPositions"
        },
        "end": {
          "type": "integer",
          "format": "uint64",
          "x-go-name": "End"
        },
        "pos": {
          "description": "Pos is the position of the term within the field, starting at 1",
          "type": "integer",
          "format": "uint64",
          "x-go-name": "Pos"
        },
        "start": {
          "description": "Start and End are the byte offsets of the term in the field",
          "type": "integer",
          "format": "uint64",
          "x-go-name": "Start"
        }
      },
      "x-go-package": "github.com/demisto/server/vendor/github.com/blevesearch/bleve/search"
    },
    "Locations": {
      "type": "array",
      "items": {
        "$ref": "#/definitions/Location"
      },
      "x-go-package": "github.com/demisto/server/vendor/github.com/blevesearch/bleve/search"
    },
    "ModuleArgs": {
      "description": "ModuleArgs represents module args",
      "type": "object",
      "additionalProperties": {
        "type": "object"
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "NotifiableItem": {
      "type": "object",
      "title": "NotifiableItem ...",
      "properties": {
        "bcc": {
          "$ref": "#/definitions/AdvanceArg"
        },
        "body": {
          "$ref": "#/definitions/AdvanceArg"
        },
        "cc": {
          "$ref": "#/definitions/AdvanceArg"
        },
        "defaultOption": {
          "type": "string",
          "x-go-name": "DefaultOption"
        },
        "format": {
          "type": "string",
          "x-go-name": "Format"
        },
        "methods": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Methods"
        },
        "replyOptions": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "ReplyOptions"
        },
        "subject": {
          "$ref": "#/definitions/AdvanceArg"
        },
        "timings": {
          "$ref": "#/definitions/NotifyTimings"
        },
        "to": {
          "$ref": "#/definitions/AdvanceArg"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "NotifyTimings": {
      "type": "object",
      "title": "NotifyTimings - time control on notify items - retries max count and intervals.",
      "properties": {
        "completeAfterReplies": {
          "type": "integer",
          "format": "uint64",
          "x-go-name": "CompleteAfterReplies"
        },
        "retriesCount": {
          "type": "integer",
          "format": "uint64",
          "x-go-name": "RetriesCount"
        },
        "retriesInterval": {
          "type": "integer",
          "format": "uint64",
          "x-go-name": "RetriesInterval"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "OperatorArgument": {
      "type": "object",
      "title": "OperatorArgument ...",
      "properties": {
        "isContext": {
          "type": "boolean",
          "x-go-name": "IsContext"
        },
        "value": {
          "$ref": "#/definitions/AdvanceArg"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Order": {
      "description": "Order struct holds a sort field and the direction of sorting",
      "type": "object",
      "properties": {
        "asc": {
          "type": "boolean",
          "x-go-name": "Asc"
        },
        "field": {
          "type": "string",
          "x-go-name": "Field"
        },
        "fieldType": {
          "type": "string",
          "x-go-name": "FieldType"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Output": {
      "description": "Output of a module command",
      "type": "object",
      "properties": {
        "contentPath": {
          "type": "string",
          "x-go-name": "ContentPath"
        },
        "contextPath": {
          "type": "string",
          "x-go-name": "ContextPath"
        },
        "description": {
          "description": "Description is either a string or a map from string to interface",
          "type": "object",
          "x-go-name": "Description"
        },
        "type": {
          "$ref": "#/definitions/OutputType"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "OutputType": {
      "type": "string",
      "title": "OutputType ...",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Period": {
      "type": "object",
      "title": "Period holds the 'Period' query, such as last 3 days, last 6 hours, between 6 days from now until 3 days from now.",
      "properties": {
        "by": {
          "description": "By is used for legacty, and if exists it will override ByTo and ByFrom",
          "type": "string",
          "x-go-name": "By"
        },
        "byFrom": {
          "type": "string",
          "x-go-name": "ByFrom"
        },
        "byTo": {
          "type": "string",
          "x-go-name": "ByTo"
        },
        "field": {
          "type": "string",
          "x-go-name": "Field"
        },
        "fromValue": {
          "type": "string",
          "format": "duration",
          "x-go-name": "FromValue"
        },
        "toValue": {
          "type": "string",
          "format": "duration",
          "x-go-name": "ToValue"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "PlaybookInput": {
      "description": "PlaybookInput represents the playbook input",
      "type": "object",
      "properties": {
        "description": {
          "type": "string",
          "x-go-name": "Description"
        },
        "key": {
          "type": "string",
          "x-go-name": "Key"
        },
        "required": {
          "type": "boolean",
          "x-go-name": "Required"
        },
        "value": {
          "$ref": "#/definitions/AdvanceArg"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "PlaybookInputs": {
      "description": "PlaybookInputs - array of PlaybookInput",
      "type": "array",
      "items": {
        "$ref": "#/definitions/PlaybookInput"
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "PlaybookOutput": {
      "description": "PlaybookOutput represents the playbook output",
      "type": "object",
      "properties": {
        "contextPath": {
          "type": "string",
          "x-go-name": "ContextPath"
        },
        "description": {
          "type": "string",
          "x-go-name": "Description"
        },
        "type": {
          "$ref": "#/definitions/OutputType"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "PlaybookOutputs": {
      "description": "PlaybookOutputs - array of PlaybookOutput",
      "type": "array",
      "items": {
        "$ref": "#/definitions/PlaybookOutput"
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "PlaybookView": {
      "description": "PlaybookView represents the view in client of playbook graph",
      "type": "object",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Question": {
      "type": "object",
      "title": "Question - question for a form with a given type.",
      "properties": {
        "columns": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/GridColumn"
          },
          "x-go-name": "GridColumns"
        },
        "defaultRows": {
          "type": "array",
          "items": {
            "type": "object",
            "additionalProperties": {
              "type": "object"
            }
          },
          "x-go-name": "DefaultRows"
        },
        "fieldAssociated": {
          "type": "string",
          "x-go-name": "FieldAssociated"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "label": {
          "type": "string",
          "x-go-name": "Label"
        },
        "labelArg": {
          "$ref": "#/definitions/AdvanceArg"
        },
        "options": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Options"
        },
        "placeholder": {
          "type": "string",
          "x-go-name": "Placeholder"
        },
        "required": {
          "type": "boolean",
          "x-go-name": "Required"
        },
        "tooltip": {
          "type": "string",
          "x-go-name": "Tooltip"
        },
        "type": {
          "type": "string",
          "x-go-name": "Type"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "RawMessage": {
      "description": "It implements Marshaler and Unmarshaler and can\nbe used to delay JSON decoding or precompute a JSON encoding.",
      "type": "array",
      "title": "RawMessage is a raw encoded JSON value.",
      "items": {
        "type": "integer",
        "format": "uint8"
      },
      "x-go-package": "encoding/json"
    },
    "Report": {
      "description": "Report - represents report",
      "type": "object",
      "properties": {
        "commitMessage": {
          "type": "string",
          "x-go-name": "CommitMessage"
        },
        "createdBy": {
          "type": "string",
          "x-go-name": "CreatedBy"
        },
        "cron": {
          "type": "string",
          "x-go-name": "Cron"
        },
        "cronView": {
          "type": "boolean",
          "x-go-name": "CronView"
        },
        "dashboard": {
          "$ref": "#/definitions/Dashboard"
        },
        "decoder": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/ReportFieldsDecoder"
          },
          "x-go-name": "Decoder"
        },
        "description": {
          "type": "string",
          "x-go-name": "Description"
        },
        "disableHeader": {
          "type": "boolean",
          "x-go-name": "DisableHeader"
        },
        "endingDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "EndingDate"
        },
        "endingType": {
          "$ref": "#/definitions/EndingType"
        },
        "humanCron": {
          "$ref": "#/definitions/HumanCron"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "latestReportName": {
          "type": "string",
          "x-go-name": "LatestReportName"
        },
        "latestReportTime": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "LatestReportTime"
        },
        "latestReportUsername": {
          "type": "string",
          "x-go-name": "LatestReportUsername"
        },
        "latestScheduledReportTime": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "LatestScheduledReportTime"
        },
        "locked": {
          "type": "boolean",
          "x-go-name": "Locked"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "name": {
          "type": "string",
          "x-go-name": "Name"
        },
        "nextScheduledTime": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "NextScheduledTime"
        },
        "orientation": {
          "type": "string",
          "x-go-name": "Orientation"
        },
        "paperSize": {
          "type": "string",
          "x-go-name": "PaperSize"
        },
        "prevName": {
          "type": "string",
          "x-go-name": "PrevName"
        },
        "prevType": {
          "type": "string",
          "x-go-name": "PrevType"
        },
        "recipients": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Recipients"
        },
        "recurrent": {
          "type": "boolean",
          "x-go-name": "Recurrent"
        },
        "reportType": {
          "type": "string",
          "x-go-name": "ReportType"
        },
        "runOnce": {
          "type": "boolean",
          "x-go-name": "RunOnce"
        },
        "runningUser": {
          "type": "string",
          "x-go-name": "RunningUser"
        },
        "scheduled": {
          "description": "is it scheduled",
          "type": "boolean",
          "x-go-name": "Scheduled"
        },
        "sections": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/Section"
          },
          "x-go-name": "Sections"
        },
        "sensitive": {
          "type": "boolean",
          "x-go-name": "Sensitive"
        },
        "shouldCommit": {
          "type": "boolean",
          "x-go-name": "ShouldCommit"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "startDate": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "StartDate"
        },
        "system": {
          "type": "boolean",
          "x-go-name": "System"
        },
        "tags": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Tags"
        },
        "times": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Times"
        },
        "timezoneOffset": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "TimezoneOffset"
        },
        "type": {
          "type": "string",
          "x-go-name": "Type"
        },
        "userAPIKey": {
          "type": "string",
          "x-go-name": "UserAPIKey"
        },
        "userAPIKeyID": {
          "type": "string",
          "x-go-name": "UserAPIKeyID"
        },
        "vcShouldIgnore": {
          "type": "boolean",
          "x-go-name": "VCShouldIgnore"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "ReportAutomation": {
      "type": "object",
      "title": "ReportAutomation ...",
      "properties": {
        "args": {
          "$ref": "#/definitions/ModuleArgs"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "name": {
          "type": "string",
          "x-go-name": "Name"
        },
        "noEvent": {
          "type": "boolean",
          "x-go-name": "NoEvent"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "ReportFieldsDecoder": {
      "type": "object",
      "title": "ReportFieldsDecoder ...",
      "properties": {
        "type": {
          "type": "string",
          "x-go-name": "Type"
        },
        "value": {
          "type": "string",
          "x-go-name": "Value"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "ReportQuery": {
      "type": "object",
      "title": "ReportQuery ...",
      "properties": {
        "filter": {
          "$ref": "#/definitions/RawMessage"
        },
        "groupBy": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "GroupBy"
        },
        "keys": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Keys"
        },
        "type": {
          "type": "string",
          "x-go-name": "Type"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "ReputationCalcAlg": {
      "type": "number",
      "format": "double",
      "title": "ReputationCalcAlg ...",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "ReputationData": {
      "description": "ReputationData holds the reputation data (reputation, regex, highlights result)",
      "type": "object",
      "properties": {
        "rawTerm": {
          "type": "string",
          "x-go-name": "RawTerm"
        },
        "reputation": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Reputation"
        },
        "reputationId": {
          "type": "string",
          "x-go-name": "ReputationID"
        },
        "term": {
          "type": "string",
          "x-go-name": "Term"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "RunStatus": {
      "description": "RunStatus of a job",
      "type": "string",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "SLA": {
      "type": "object",
      "title": "SLA ...",
      "properties": {
        "days": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Days"
        },
        "hours": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Hours"
        },
        "weeks": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Weeks"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "SLAState": {
      "description": "SLAState is the incident sla at closure time",
      "type": "number",
      "format": "double",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "ScriptSubType": {
      "description": "ScriptSubType holds the script type version",
      "type": "string",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "ScriptTarget": {
      "description": "ScriptTarget represents the module where this script should run",
      "type": "integer",
      "format": "int64",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "ScriptType": {
      "description": "ScriptType holds the type of a script",
      "type": "string",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "SearchIncidentsData": {
      "type": "object",
      "title": "SearchIncidentsData ...",
      "properties": {
        "filter": {
          "$ref": "#/definitions/IncidentFilter"
        },
        "userFilter": {
          "type": "boolean",
          "x-go-name": "FilterByUser"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "Section": {
      "type": "object",
      "title": "Section ...",
      "properties": {
        "automation": {
          "$ref": "#/definitions/ReportAutomation"
        },
        "data": {
          "type": "object",
          "x-go-name": "Data"
        },
        "description": {
          "type": "string",
          "x-go-name": "Description"
        },
        "displayType": {
          "type": "string",
          "x-go-name": "DisplayType"
        },
        "emptyNotification": {
          "type": "string",
          "x-go-name": "EmptyNotification"
        },
        "fromDate": {
          "type": "string",
          "x-go-name": "FromDate"
        },
        "layout": {
          "type": "object",
          "x-go-name": "Layout"
        },
        "query": {
          "$ref": "#/definitions/ReportQuery"
        },
        "title": {
          "type": "string",
          "x-go-name": "Title"
        },
        "titleStyle": {
          "type": "object",
          "additionalProperties": {
            "type": "object"
          },
          "x-go-name": "TitleStyle"
        },
        "toDate": {
          "type": "string",
          "x-go-name": "ToDate"
        },
        "type": {
          "type": "string",
          "x-go-name": "Type"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "SectionItem": {
      "type": "object",
      "title": "SectionItem ...",
      "properties": {
        "data": {
          "type": "object",
          "x-go-name": "Data"
        },
        "displayType": {
          "type": "string",
          "x-go-name": "DisplayType"
        },
        "endCol": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "EndCol"
        },
        "fieldId": {
          "type": "string",
          "x-go-name": "FieldID"
        },
        "fieldName": {
          "type": "string",
          "x-go-name": "FieldName"
        },
        "fieldType": {
          "type": "string",
          "x-go-name": "FieldType"
        },
        "headerStyle": {
          "type": "object",
          "x-go-name": "HeaderStyle"
        },
        "index": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Index"
        },
        "startCol": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "StartCol"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Severity": {
      "description": "Severity is the incident severity",
      "type": "number",
      "format": "double",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "StatsQueryResponse": {
      "type": "object",
      "title": "StatsQueryResponse - Describe the data returned related to a specific widget cell in a dashboard.",
      "properties": {
        "data": {
          "description": "data array or object describing the statistics data based on type.",
          "type": "object",
          "x-go-name": "Data"
        },
        "widgetCellId": {
          "type": "string",
          "x-go-name": "WidgetCellID"
        }
      },
      "x-go-package": "github.com/demisto/server/repo/entities"
    },
    "StatsTextResponse": {
      "type": "object",
      "title": "StatsTextResponse - Describe the data returned related to a specific text widget cell in a dashboard.",
      "properties": {
        "groups": {
          "$ref": "#/definitions/Groups"
        },
        "text": {
          "description": "Describe the complete text for the text widget, after placeholders injection.",
          "type": "string",
          "x-go-name": "Text"
        }
      },
      "x-go-package": "github.com/demisto/server/repo/entities"
    },
    "StatsTrendsResponse": {
      "description": "StatsTrendsResponse - Represent a trend response from statistics. Provides information about\nthe current value and the previous value based on the period.",
      "type": "object",
      "properties": {
        "currSum": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "CurrSum"
        },
        "prevSum": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "PrevSum"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "System": {
      "description": "System - URL stands for ip or hostname",
      "type": "object",
      "properties": {
        "agent": {
          "$ref": "#/definitions/SystemAgent"
        },
        "arch": {
          "type": "string",
          "x-go-name": "Arch"
        },
        "ciphers": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Ciphers"
        },
        "credentials": {
          "type": "string",
          "x-go-name": "CredentialsName"
        },
        "engineId": {
          "type": "string",
          "x-go-name": "EngineID"
        },
        "host": {
          "type": "string",
          "x-go-name": "Host"
        },
        "integrationinstanceid": {
          "type": "string",
          "x-go-name": "IntegrationInstanceID"
        },
        "issharedagent": {
          "type": "boolean",
          "x-go-name": "IsSharedAgent"
        },
        "name": {
          "type": "string",
          "x-go-name": "Name"
        },
        "os": {
          "type": "string",
          "x-go-name": "OS"
        },
        "password": {
          "type": "string",
          "x-go-name": "Password"
        },
        "smb": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "SMBv"
        },
        "smbport": {
          "type": "integer",
          "format": "uint16",
          "x-go-name": "SMBPort"
        },
        "sshkey": {
          "type": "string",
          "x-go-name": "SSHKey"
        },
        "sshport": {
          "type": "integer",
          "format": "uint16",
          "x-go-name": "SSHPort"
        },
        "terminalOptions": {
          "$ref": "#/definitions/TerminalOptions"
        },
        "user": {
          "type": "string",
          "x-go-name": "User"
        },
        "workgroup": {
          "type": "string",
          "x-go-name": "Workgroup"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "SystemAgent": {
      "description": "SystemAgent - represents agent status and holds server context",
      "type": "object",
      "properties": {
        "servercontext": {
          "type": "array",
          "items": {
            "type": "integer",
            "format": "uint8"
          },
          "x-go-name": "ServerContext"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "Task": {
      "description": "Task is the basic task in the task repository that can be associated to an incident via playbook",
      "type": "object",
      "properties": {
        "brand": {
          "type": "string",
          "x-go-name": "Brand"
        },
        "clonedFrom": {
          "type": "string",
          "x-go-name": "ClonedFrom"
        },
        "comment": {
          "type": "string",
          "x-go-name": "Comment"
        },
        "conditions": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "ConditionnKeys"
        },
        "description": {
          "type": "string",
          "x-go-name": "Description"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "isCommand": {
          "type": "boolean",
          "x-go-name": "IsCommand"
        },
        "isLocked": {
          "type": "boolean",
          "x-go-name": "IsLocked"
        },
        "isSystemTask": {
          "type": "boolean",
          "x-go-name": "IsSystemTask"
        },
        "isTitleTask": {
          "type": "boolean",
          "x-go-name": "IsTitleTask"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "name": {
          "type": "string",
          "x-go-name": "Name"
        },
        "playbookId": {
          "type": "string",
          "x-go-name": "PlaybookID"
        },
        "scriptId": {
          "type": "string",
          "x-go-name": "AutomationScriptID"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "tags": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Tags"
        },
        "type": {
          "$ref": "#/definitions/TaskType"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "TaskCondition": {
      "description": "TaskCondition - contains a condition and a corresponding label\nif the condition satisfied - its label is taken as the next task(s) input (e.i. the label on the edge)",
      "type": "object",
      "properties": {
        "condition": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/ArgFilter"
          },
          "x-go-name": "Condition"
        },
        "label": {
          "type": "string",
          "x-go-name": "Label"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "TaskLoop": {
      "description": "TaskLoop contains loop details",
      "type": "object",
      "properties": {
        "brand": {
          "type": "string",
          "x-go-name": "Brand"
        },
        "builtinCondition": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/ArgFilter"
          },
          "x-go-name": "BuiltInCondition"
        },
        "exitCondition": {
          "type": "string",
          "x-go-name": "ExitCondition"
        },
        "forEach": {
          "type": "boolean",
          "x-go-name": "ForEach"
        },
        "isCommand": {
          "type": "boolean",
          "x-go-name": "IsCommand"
        },
        "scriptArguments": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/AdvanceArg"
          },
          "x-go-name": "ScriptArguments"
        },
        "scriptId": {
          "type": "string",
          "x-go-name": "AutomationScriptID"
        },
        "wait": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "WaitBetweenIterations"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "TaskState": {
      "description": "TaskState indicates the state of the task during the incident/investigation execution",
      "type": "string",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "TaskType": {
      "description": "TaskType is the Task in the playbook context as a node",
      "type": "string",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "TaskView": {
      "description": "TaskView represents the view in client of the tasks graph",
      "type": "object",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "TermLocationMap": {
      "type": "object",
      "additionalProperties": {
        "$ref": "#/definitions/Locations"
      },
      "x-go-package": "github.com/demisto/server/vendor/github.com/blevesearch/bleve/search"
    },
    "TerminalOptions": {
      "description": "TerminalOptions - terminal options to use in case of using pty",
      "type": "object",
      "properties": {
        "Echo": {
          "type": "integer",
          "format": "uint32"
        },
        "Terminal": {
          "type": "boolean"
        },
        "TerminalHeight": {
          "type": "integer",
          "format": "int64"
        },
        "TerminalType": {
          "type": "string"
        },
        "TerminalWidth": {
          "type": "integer",
          "format": "int64"
        },
        "TyISpeed": {
          "type": "integer",
          "format": "uint32"
        },
        "TyOSpeed": {
          "type": "integer",
          "format": "uint32"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "TimerAction": {
      "type": "string",
      "title": "TimerAction ...",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "TimerTrigger": {
      "type": "object",
      "title": "TimerTrigger ...",
      "properties": {
        "action": {
          "$ref": "#/definitions/TimerAction"
        },
        "fieldName": {
          "type": "string",
          "x-go-name": "FieldName"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "TransformerOperatorID": {
      "type": "string",
      "title": "TransformerOperatorID ...",
      "x-go-package": "github.com/demisto/server/domain"
    },
    "UpdateDataBatch": {
      "type": "object",
      "title": "UpdateDataBatch ...",
      "properties": {
        "CustomFields": {
          "type": "object",
          "additionalProperties": {
            "type": "object"
          }
        },
        "all": {
          "type": "boolean",
          "x-go-name": "All"
        },
        "closeNotes": {
          "type": "string",
          "x-go-name": "CloseNotes"
        },
        "closeReason": {
          "type": "string",
          "x-go-name": "CloseReason"
        },
        "columns": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Columns"
        },
        "data": {
          "type": "object",
          "additionalProperties": {
            "type": "object"
          },
          "x-go-name": "Data"
        },
        "filter": {
          "$ref": "#/definitions/IncidentFilter"
        },
        "force": {
          "type": "boolean",
          "x-go-name": "Force"
        },
        "ids": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "IDs"
        },
        "line": {
          "type": "string",
          "x-go-name": "Line"
        },
        "originalIncidentId": {
          "type": "string",
          "x-go-name": "OriginalIncidentID"
        },
        "overrideInvestigation": {
          "type": "boolean",
          "x-go-name": "OverrideInvestigation"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "UpdateResponse": {
      "type": "object",
      "title": "UpdateResponse ...",
      "properties": {
        "notUpdated": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "NotUpdated"
        },
        "updatedIds": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "UpdatedIds"
        }
      },
      "x-go-package": "github.com/demisto/server/repo/entities"
    },
    "Widget": {
      "description": "Widget describe a widget component used to get statistics requests, based on parameters such as\ndataType and widgetType. A widget can be a part of widgets collection inside a dashboard.",
      "type": "object",
      "required": [
        "name",
        "widgetType"
      ],
      "properties": {
        "category": {
          "description": "Category the widget is related to. Used to display in widget library under category or dataType if empty.",
          "type": "string",
          "x-go-name": "Category"
        },
        "commitMessage": {
          "type": "string",
          "x-go-name": "CommitMessage"
        },
        "dataType": {
          "description": "Data type of the widget. Describes what data does the widget query. supporting data types \"incidents\",\"messages\",\"system\",\"entries\",\"tasks\", \"audit\".",
          "type": "string",
          "x-go-name": "DataType"
        },
        "dateRange": {
          "$ref": "#/definitions/DateRange"
        },
        "description": {
          "description": "The description of the widget's usage and data representation.",
          "type": "string",
          "x-go-name": "Description"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "isPredefined": {
          "description": "Is the widget a system widget.",
          "type": "boolean",
          "x-go-name": "IsPredefined"
        },
        "locked": {
          "description": "Is the widget locked for editing.",
          "type": "boolean",
          "x-go-name": "Locked"
        },
        "modified": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Modified"
        },
        "name": {
          "description": "Default name of the widget.",
          "type": "string",
          "x-go-name": "Name"
        },
        "params": {
          "description": "Additional parameters for this widget, depends on widget type and data.",
          "type": "object",
          "additionalProperties": {
            "type": "object"
          },
          "x-go-name": "AdditionalParams"
        },
        "prevName": {
          "description": "The previous name of the widget.",
          "type": "string",
          "x-go-name": "PrevName"
        },
        "query": {
          "description": "Query to search on the dataType.",
          "type": "string",
          "x-go-name": "Query"
        },
        "shouldCommit": {
          "type": "boolean",
          "x-go-name": "ShouldCommit"
        },
        "size": {
          "description": "Maximum size for this widget data returned.",
          "type": "integer",
          "format": "int64",
          "x-go-name": "Size"
        },
        "sort": {
          "description": "Sorting array to sort the data received by the given Order parameters.",
          "type": "array",
          "items": {
            "$ref": "#/definitions/Order"
          },
          "x-go-name": "Sort"
        },
        "sortValues": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SortValues"
        },
        "vcShouldIgnore": {
          "type": "boolean",
          "x-go-name": "VCShouldIgnore"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Versn"
        },
        "widgetType": {
          "description": "Widget type describes how does the widget should recieve the data, and display it. Supporting types: \"bar\", \"column\", \"pie\", \"list\", \"number\", \"trend\", \"text\", \"duration\", \"image\", \"line\", and \"table\".",
          "type": "string",
          "x-go-name": "WidgetType"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "WidgetCell": {
      "type": "object",
      "title": "WidgetCell ...",
      "properties": {
        "forceRange": {
          "type": "boolean",
          "x-go-name": "ForceRange"
        },
        "h": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Height"
        },
        "i": {
          "type": "string",
          "x-go-name": "Key"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "w": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Width"
        },
        "widget": {
          "$ref": "#/definitions/Widget"
        },
        "x": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Xs"
        },
        "y": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Ys"
        }
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "WidgetCells": {
      "type": "array",
      "title": "WidgetCells ...",
      "items": {
        "$ref": "#/definitions/WidgetCell"
      },
      "x-go-package": "github.com/demisto/server/domain"
    },
    "auditResult": {
      "type": "object",
      "properties": {
        "audits": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/Audit"
          },
          "x-go-name": "Audits"
        },
        "total": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Total"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "automationScriptFilter": {
      "description": "automationScriptFilter is a general filter that fetches entities using a query string query using the Query value",
      "type": "object",
      "properties": {
        "Cache": {
          "description": "Cache of join functions",
          "type": "object",
          "additionalProperties": {
            "type": "array",
            "items": {
              "type": "string"
            }
          }
        },
        "page": {
          "description": "0-based page",
          "type": "integer",
          "format": "int64",
          "x-go-name": "Page"
        },
        "query": {
          "type": "string",
          "x-go-name": "Query"
        },
        "searchAfter": {
          "description": "Efficient next page, pass max sort value from previous page",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SearchAfter"
        },
        "searchBefore": {
          "description": "Efficient prev page, pass min sort value from next page",
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "SearchBefore"
        },
        "size": {
          "description": "Size is limited to 1000, if not passed it defaults to 0, and no results will return",
          "type": "integer",
          "format": "int64",
          "x-go-name": "Size"
        },
        "sort": {
          "description": "The sort order",
          "type": "array",
          "items": {
            "$ref": "#/definitions/Order"
          },
          "x-go-name": "Sort"
        },
        "stripContext": {
          "type": "boolean",
          "x-go-name": "StripContext"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "automationScriptFilterWrapper": {
      "type": "object",
      "title": "automationScriptFilterWrapper ...",
      "properties": {
        "filter": {
          "$ref": "#/definitions/GenericStringFilter"
        },
        "savePassword": {
          "type": "boolean",
          "x-go-name": "StorePassword"
        },
        "script": {
          "$ref": "#/definitions/AutomationScript"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "automationScriptResult": {
      "type": "object",
      "title": "automationScriptResult ...",
      "properties": {
        "pythonEnabled": {
          "type": "boolean",
          "x-go-name": "PythonEnabled"
        },
        "scripts": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/AutomationScriptAPI"
          },
          "x-go-name": "Scripts"
        },
        "selectedScript": {
          "type": "object",
          "additionalProperties": {
            "type": "object"
          },
          "x-go-name": "SelectedScript"
        },
        "suggestions": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Tags"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "deleteEvidence": {
      "type": "object",
      "properties": {
        "evidenceID": {
          "type": "string",
          "x-go-name": "EvidenceID"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "dockerImage": {
      "description": "dockerImage details",
      "type": "object",
      "properties": {
        "createdAt": {
          "type": "string",
          "x-go-name": "CreatedAt"
        },
        "createdSince": {
          "type": "string",
          "x-go-name": "CreatedSince"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "repository": {
          "type": "string",
          "x-go-name": "Repository"
        },
        "size": {
          "type": "string",
          "x-go-name": "Size"
        },
        "tag": {
          "type": "string",
          "x-go-name": "Tag"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "dockerImagesResult": {
      "type": "object",
      "properties": {
        "images": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/dockerImage"
          },
          "x-go-name": "Images"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "evidencesFilterWrapper": {
      "type": "object",
      "properties": {
        "filter": {
          "$ref": "#/definitions/GenericStringDateFilter"
        },
        "incidentID": {
          "type": "string",
          "x-go-name": "IncidentID"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "genericIndicatorUpdateBatch": {
      "type": "object",
      "properties": {
        "all": {
          "type": "boolean",
          "x-go-name": "All"
        },
        "columns": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Columns"
        },
        "doNotWhitelist": {
          "type": "boolean",
          "x-go-name": "DoNotWhitelist"
        },
        "filter": {
          "$ref": "#/definitions/IndicatorFilter"
        },
        "ids": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "IDs"
        },
        "reason": {
          "type": "string",
          "x-go-name": "Reason"
        },
        "reputations": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Reputations"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "indicatorContext": {
      "type": "object",
      "properties": {
        "entryId": {
          "type": "string",
          "x-go-name": "EntryID"
        },
        "indicator": {
          "$ref": "#/definitions/IocObject"
        },
        "investigationId": {
          "type": "string",
          "x-go-name": "InvestigationID"
        },
        "seenNow": {
          "type": "boolean",
          "x-go-name": "SeenNow"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "invPlaybookAssignee": {
      "type": "object",
      "properties": {
        "assignee": {
          "type": "string",
          "x-go-name": "Assignee"
        },
        "inTaskID": {
          "type": "string",
          "x-go-name": "TaskID"
        },
        "invId": {
          "type": "string",
          "x-go-name": "ID"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Version"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "invPlaybookDue": {
      "type": "object",
      "properties": {
        "date": {
          "type": "string",
          "format": "date-time",
          "x-go-name": "Date"
        },
        "inTaskID": {
          "type": "string",
          "x-go-name": "TaskID"
        },
        "invId": {
          "type": "string",
          "x-go-name": "ID"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Version"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "invTaskInfo": {
      "type": "object",
      "properties": {
        "args": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/AdvanceArg"
          },
          "x-go-name": "Args"
        },
        "comment": {
          "type": "string",
          "x-go-name": "Comment"
        },
        "conditions": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/TaskCondition"
          },
          "x-go-name": "Conditions"
        },
        "inTaskID": {
          "type": "string",
          "x-go-name": "TaskID"
        },
        "input": {
          "type": "string",
          "x-go-name": "Input"
        },
        "invId": {
          "type": "string",
          "x-go-name": "ID"
        },
        "loopArgs": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/AdvanceArg"
          },
          "x-go-name": "LoopArgs"
        },
        "loopCondition": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/ArgFilter"
          },
          "x-go-name": "LoopCondition"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Version"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "newDockerImage": {
      "type": "object",
      "properties": {
        "base": {
          "type": "string",
          "x-go-name": "BaseImage"
        },
        "dependencies": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Dependencies"
        },
        "name": {
          "type": "string",
          "x-go-name": "Name"
        },
        "packages": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Packages"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "newDockerImageResult": {
      "type": "object",
      "properties": {
        "output": {
          "type": "string",
          "x-go-name": "Output"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "remoteRepos": {
      "type": "object",
      "x-go-package": "github.com/demisto/server/web"
    },
    "updateEntry": {
      "type": "object",
      "properties": {
        "args": {
          "type": "object",
          "additionalProperties": {
            "$ref": "#/definitions/AdvanceArg"
          },
          "x-go-name": "Args"
        },
        "data": {
          "type": "string",
          "x-go-name": "Data"
        },
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "investigationId": {
          "type": "string",
          "x-go-name": "InvestigationID"
        },
        "markdown": {
          "type": "boolean",
          "x-go-name": "Markdown"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Version"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "updateEntryTags": {
      "type": "object",
      "properties": {
        "id": {
          "type": "string",
          "x-go-name": "ID"
        },
        "investigationId": {
          "type": "string",
          "x-go-name": "InvestigationID"
        },
        "tags": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Tags"
        },
        "version": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Version"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "updateIndicatorReputationData": {
      "type": "object",
      "properties": {
        "InvestigationId": {
          "type": "string",
          "x-go-name": "InvID"
        },
        "doNotWhitelist": {
          "type": "boolean",
          "x-go-name": "DoNotWhitelist"
        },
        "entryId": {
          "type": "string",
          "x-go-name": "EntryID"
        },
        "manualScore": {
          "type": "boolean",
          "x-go-name": "ManualScore"
        },
        "reason": {
          "type": "string",
          "x-go-name": "Reason"
        },
        "reputation": {
          "type": "integer",
          "format": "int64",
          "x-go-name": "Reputation"
        },
        "reputations": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "x-go-name": "Reputations"
        },
        "value": {
          "type": "string",
          "x-go-name": "Value"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    },
    "uploadedEntry": {
      "type": "object",
      "properties": {
        "contents": {
          "type": "string",
          "x-go-name": "Contents"
        },
        "format": {
          "type": "string",
          "x-go-name": "ContentsFormat"
        },
        "investigationId": {
          "type": "string",
          "x-go-name": "InvestigationID"
        }
      },
      "x-go-package": "github.com/demisto/server/web"
    }
  },
  "securityDefinitions": {
    "api_key": {
      "type": "apiKey",
      "name": "Authorization",
      "in": "header"
    },
    "csrf_token": {
      "type": "apiKey",
      "name": "X-XSRF-TOKEN",
      "in": "header"
    }
  },
  "security": [
    {
      "api_key": []
    },
    {
      "csrf_token": []
    }
  ]
}