IBM QRadar SOAR

 View Only

 Using REST API GET to obtain case fields and artifacts

Cheryl Lorei's profile image
Cheryl Lorei posted Wed May 13, 2026 02:02 PM

Has anyone been successful building logic to utilize the REST API to use a GET to obtain case field information and artifact information?  We are trying to meet a regulatory requirement for retention of case information.

It seems the '/orgs/{org_id}/incidents/{inc_id}/artifacts' method has been deprecated and I'm not sure how to pull this information.

Any help would be appreciated.

Cheryl

Martin Feeney's profile image
Martin Feeney posted Fri May 15, 2026 05:18 AM

Hi Cheryl,

The recomendation from dev would be to use

POST /orgs/{org_id}/incidents/{inc_id}/artifacts/query_paged

The GET was deprecated some time ago for mainly performance reasons if I recall correctly.

Have you looked at this option ?

If theres a reason this won't meet your needs feel free to contact me directly explaining your use case and we can see what alternative options there might be.

Related Content