IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  REST API update expected version

    Posted Thu May 12, 2022 12:29 PM
    Getting "Expected version is 9; actual version is 8." when trying to PUT https://{{host}}/rest/orgs/{{org_id}}/incidents/{{last_inc_id}} with body
    {
        "resolution_summary": {
            "format""html",
            "content""<div class=\"rte\"><div>test only</div></div>"
        },
        "vers":"9" 

    }
    response below

    {
        "success"false,
        "title"null,
        "message""Expected version is 9; actual version is 8.",
        "hints": [],
        "error_code""generic"
    }



    ------------------------------
    Irek Romaniuk
    ------------------------------


  • 2.  RE: REST API update expected version

    Posted Thu May 12, 2022 06:54 PM
    Hi Irek,

    This happens when there are any conflicting edits made by another user between the REST GET request and PUT request.

    To resolve this error, you can use GET/PUT calls:

    a. Get the latest incident data using the REST GET endpoint
    b. Make your changes to the retuned data
    c. Invoke REST PUT with modified incident data

    Thanks
    -Ram

    ------------------------------
    Ram Badvelu
    ------------------------------



  • 3.  RE: REST API update expected version

    Posted Tue May 17, 2022 10:15 AM
    Hi Irek,

    If using Python, you could also check out our helper methods at: https://ibm.biz/soar-python-docs

    Specifically our get_put method at: https://ibmresilient.github.io/resilient-python-api/pages/resilient/resilient.html#resilient.co3.SimpleClient.get_put

    ------------------------------
    Shane Curtin
    Apps Engineer - IBM Security SOAR
    ------------------------------