IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  How to call Resilient API to Create Incident

    Posted Fri April 21, 2023 11:02 AM

    How can i programatically create incident in SOAR application using resilient Create Incident API? I read the IBM documentation but am not clear on it. What would be a starting point or minimum setup that I would need to build python script to format my input data into JSON and call the Resilient API to create an incident?



    ------------------------------
    Mahesh Patel
    ------------------------------


  • 2.  RE: How to call Resilient API to Create Incident

    Posted Tue September 19, 2023 04:41 PM

    Greetings, Mahesh!

    Do you still have troubles with this? If so, I can provide you some code to create Resilient Incidents via Python.

    The initial requirements would be an API Key with sufficient permissions, connection to the platform, and knowing which fields are required on-creation in your platform. If you have not created any, then Incident Name is enough, if I recall correctly. Maybe investigator aswell.

    Cheers!



    ------------------------------
    Pol Estecha Hernández
    ------------------------------

    Original Message


  • 3.  RE: How to call Resilient API to Create Incident

    Posted Mon March 04, 2024 07:04 PM

    Hi, Pol Estecha Hernández

    Can you also share some code to create Resilient Incidents via Python.?



    ------------------------------
    Yuhyun Won
    ------------------------------

    Original Message