IBM Security QRadar

 View Only
  • 1.  QRadar API - "unassign" an offense from a user

    Posted Mon September 30, 2019 07:35 AM

    Hey all, I have a project I'm working on where I want to unassign a ticket through the API.

     

    There doesn't seem to be a documented way of doing this in 7.3.2

     

    If the value is empty (/api/siem/offenses/99999999?assigned_to=) or /api/siem/offenses/99999999?assigned_to=""), the API returns a success but didn't update anything. 

     

    /api/siem/offenses/99999999?assigned_to=null returns a 422.

    /api/siem/offenses/99999999?assigned_to is null returns a 200, but nothing is updated

     

    The GUI doesn't hit the API directly to assign/unassign an offense, but when unassigning it sets the value to -1.  In the API, this returns a 422 as well.

     

    How do you unassign an Offense in the API?  Thanks!

     


    AlixPartners - General

    Confidential: This electronic message and all contents contain information from the firm of AlixPartners, LLP and its affiliates which may be confidential or otherwise protected from disclosure. The information is intended to be for the addressee only. If you are not the addressee, any disclosure, copy, distribution or use of the contents of this message is prohibited. If you have received this electronic message in error, please notify us immediately at +1 (248) 358-4420 and destroy the original message and all copies.


  • 2.  RE: QRadar API - "unassign" an offense from a user

    Posted Fri March 27, 2020 09:34 AM
    Hello Jeremy,
    You managed to get solution to this issue?

    ------------------------------
    Husmukh Maheshwari
    ------------------------------



  • 3.  RE: QRadar API - "unassign" an offense from a user

    Posted Mon June 15, 2020 10:18 AM
    Good afternoon, this topic interests me, please tell me how you assign a CRE to a user.

    My intention is that whenever I skip that kind of offesa, I always assign it to a specific user.

    Thank you

    ------------------------------
    Marcos Gag
    ------------------------------