Hi all ,

Is there a way to modify an incident (other incident that has ran the playbook) from the playbook itself.

also, anyone has expirees using the patch : /orgs/{org_id}/incidents/{inc_id} RESTapi , its requesting a version number as part of input and I'm not sure how to get that.

Thanks.

Hi Mohamad,

Unfortunately it is not possible to modify another incident from within an incident playbook. 

Regarding using the PATCH incident API, you can get the latest version number (vers) from GET incident api that you can use in PATCH api request.

Hi Mohamad,

Dilip is right: there is no "native" operation that will allow you to  modify another incident from within an incident playbook.

But since you seem familiar with REST APIs, maybe you could use the REST API Functions for SOAR.

Just a thought

Thanks @Dillip Nath and @Pierre Dufresne , yes I will look into using the RestAPI function now that I know where to get the version number from.