pub async fn attach_alerts( t: &Transport, case_id: &str, alert_ids: &[String], indices: &[String], rule_id: &str, rule_name: &str, ) -> Result<Case>