IBM Security QRadar SOAR

 View Only
  • 1.  REST API update expected version

    Posted Thu May 12, 2022 12:29 PM
    Getting "Expected version is 9; actual version is 8." when trying to PUT https://{{host}}/rest/orgs/{{org_id}}/incidents/{{last_inc_id}} with body
    {
        "resolution_summary": {
            "format""html",
            "content""<div class=\"rte\"><div>test only</div></div>"
        },
        "vers":"9" 

    }
    response below

    {
        "success"false,
        "title"null,
        "message""Expected version is 9; actual version is 8.",
        "hints": [],
        "error_code""generic"
    }



    ------------------------------
    Irek Romaniuk
    ------------------------------


  • 2.  RE: REST API update expected version

    Posted Thu May 12, 2022 06:54 PM
    Hi Irek,

    This happens when there are any conflicting edits made by another user between the REST GET request and PUT request.

    To resolve this error, you can use GET/PUT calls:

    a. Get the latest incident data using the REST GET endpoint
    b. Make your changes to the retuned data
    c. Invoke REST PUT with modified incident data

    Thanks
    -Ram

    ------------------------------
    Ram Badvelu
    ------------------------------



  • 3.  RE: REST API update expected version

    Posted Tue May 17, 2022 10:15 AM
    Hi Irek,

    If using Python, you could also check out our helper methods at: https://ibm.biz/soar-python-docs

    Specifically our get_put method at: https://ibmresilient.github.io/resilient-python-api/pages/resilient/resilient.html#resilient.co3.SimpleClient.get_put

    ------------------------------
    Shane Curtin
    Apps Engineer - IBM Security SOAR
    ------------------------------