IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Bulk upload/delete rows using REST APIs to data tables

    Posted 10/27/22 04:33 PM
    Was wondering if there was a way to bulk create or delete using 

    POST /orgs/{org_id}/incidents/{inc_id}/table_data/{table_id}/row_data


    DELETE /orgs/{org_id}/incidents/{inc_id}/table_data/{table_id}/row_data/{row_id}


    into the datatable?

    Currently I am using script to loop over all the rows that are to be added, trying to find a better approach

    Thanks & Regards,



    ------------------------------
    Kavi Harjani
    ------------------------------


  • 2.  RE: Bulk upload/delete rows using REST APIs to data tables

    Posted 11/01/22 10:57 AM
    Hi Kavi - not that I am aware of, but I could be wrong. The only way via the API that I know is to loop and repeatedly delete the rows one by one.

    ------------------------------
    Bo Bleckel
    ------------------------------



  • 3.  RE: Bulk upload/delete rows using REST APIs to data tables

    Posted 11/02/22 01:27 AM
    Hi Kavi,

    If you mean all rows when you are saying bulk, you can delete all rows with using below endpoint.



    As far as I know, it is not possible to add multiple rows. Adding with using loop looks the best choice. Previously, I had created a multi threaded script for adding rows faster. Unfortunately, it didn't work because SOAR processes "add row" requests one by one in the background.

    ------------------------------
    Burak Karaduman
    ------------------------------



Related Content