IBM Security QRadar SOAR

 View Only
  • 1.  Bulk upload/delete rows using REST APIs to data tables

    Posted Thu October 27, 2022 04:33 PM
    Was wondering if there was a way to bulk create or delete using 

    POST /orgs/{org_id}/incidents/{inc_id}/table_data/{table_id}/row_data


    DELETE /orgs/{org_id}/incidents/{inc_id}/table_data/{table_id}/row_data/{row_id}


    into the datatable?

    Currently I am using script to loop over all the rows that are to be added, trying to find a better approach

    Thanks & Regards,



    ------------------------------
    Kavi Harjani
    ------------------------------


  • 2.  RE: Bulk upload/delete rows using REST APIs to data tables

    Posted Tue November 01, 2022 10:57 AM
    Hi Kavi - not that I am aware of, but I could be wrong. The only way via the API that I know is to loop and repeatedly delete the rows one by one.

    ------------------------------
    Bo Bleckel
    ------------------------------



  • 3.  RE: Bulk upload/delete rows using REST APIs to data tables

    Posted Wed November 02, 2022 01:27 AM
    Hi Kavi,

    If you mean all rows when you are saying bulk, you can delete all rows with using below endpoint.



    As far as I know, it is not possible to add multiple rows. Adding with using loop looks the best choice. Previously, I had created a multi threaded script for adding rows faster. Unfortunately, it didn't work because SOAR processes "add row" requests one by one in the background.

    ------------------------------
    Burak Karaduman
    ------------------------------