IBM Security QRadar SOAR

 View Only
  • 1.  How to call Resilient API to Create Incident

    Posted Fri April 21, 2023 11:02 AM

    How can i programatically create incident in SOAR application using resilient Create Incident API? I read the IBM documentation but am not clear on it. What would be a starting point or minimum setup that I would need to build python script to format my input data into JSON and call the Resilient API to create an incident?

    Mahesh Patel

  • 2.  RE: How to call Resilient API to Create Incident

    Posted 9 days ago

    Greetings, Mahesh!

    Do you still have troubles with this? If so, I can provide you some code to create Resilient Incidents via Python.

    The initial requirements would be an API Key with sufficient permissions, connection to the platform, and knowing which fields are required on-creation in your platform. If you have not created any, then Incident Name is enough, if I recall correctly. Maybe investigator aswell.


    Pol Estecha Hernández