IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

API identification before using IncidentArtifactREST

  • 1.  API identification before using IncidentArtifactREST

    Posted Thu June 13, 2019 09:35 AM
    Hello,

    I'm trying to use the IncidentArtifactREST API to GET all the artifact information from an incident (and then POST it into an other incident).
    It works well on the Resilient Interactive REST API platform but when I implement it into a workflow, there is always an error with the status code 401. It seems I am "Unauthorized".
    Ia anyone know how I can handle this ? Maybe an identification before ? But how to set the token/cookies ?

    Thanks a lot,
    Regards,


    ------------------------------
    Neilo PERRIN-GANIER
    ------------------------------


  • 2.  RE: API identification before using IncidentArtifactREST

    Posted Thu June 13, 2019 02:05 PM
    Hi Neilo

    It sounds like you are having problems with credentials..are they defined properly in 
    you app.config file?  Can you post resilient-circuits output error here?

    AnnMarie

    ------------------------------
    AnnMarie Norcross
    ------------------------------