IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

Patch REST API fails on nested properties.

  • 1.  Patch REST API fails on nested properties.

    Posted Thu July 13, 2023 09:29 AM

    Hi, 

    I am trying to PATCH an incident from the REST API swagger documentation of Resilient there I am sending this in body of PATCH  - 

    {
        "changes": [
          {
            "field": {
              "id": {},
              "name": "properties.domain"
            },
            "old_value": {
              "object": {
                "text": "MYORG"
              }
            },
            "new_value": {
              "object": {
                "text": "MYNEWORG"
              }
            }
          }
        "version": 12345
      }

    The response is - 

    If I go fetch incident details from API I can see the domain a sub element of the properties 

    What field name should I enter in order to make this patch working.

     I am using the same terminology to fetch the incidents as properties.domain and this is working but not when I am patching incident.



    ------------------------------
    Deepansh Saini
    ------------------------------