Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
REST APIs > Update Incidents API > Request examples for the Update Incidents API
Request examples for the Update Incidents API
This section shows examples of requests to the API. For more information about each parameter shown in the request, see Input parameters for the Update Incidents API.
Request to update incident status by Incident ID and Partition Index
curl --location --request POST 'https://<DLP Manager IP>:<DLP Manager port>/dlp/rest/v1/incidents/update' \
--header 'Authorization: Bearer <access token> ' \
--header 'Content-Type: application/json' \
--data-raw '{
"incident_keys" : [
{
"incident_id" : 2719662,
"partition_index": 20210831
},
{
"incident_id" : 2719665,
"partition_index": 20210831
},
{
"incident_id" : 271966800000,
"partition_index": 20210831
}
],
"type" : "INCIDENTS",
"action_type" : "STATUS",
"value" : "NEW"
}'
 
Request to update incident status with scan_partitions set to ALL
curl --location --request POST 'https://<DLP Manager IP>:<DLP Manager port>/dlp/rest/v1/incidents/update' \
--header 'Authorization: Bearer <access token>' \
--header 'Content-Type: application/json' \
--data-raw '{
"incident_keys" : [
{
"incident_id" : 132035
}
],
"type" : "INCIDENTS",
"action_type" : "STATUS",
"value" : "IN_PROCESS",
"scan_partitions" : "ALL"
}'
 
Request to update incidents status with scan_partitions set to LAST_ACTIVE
curl --location --request POST 'https://<DLP Manager IP>:<DLP Manager port>/dlp/rest/v1/incidents/update' \
--header 'Authorization: Bearer <access token>' \
--header 'Content-Type: application/json' \
--data-raw '{
"incident_keys" : [
{
"incident_id" : 2185301
},
{
"incident_id" : 2719665
},
{
"incident_id" : 2719668
}
],
"type" : "INCIDENTS",
"action_type" : "STATUS",
"value" : "NEW",
"scan_partitions" : "LAST_ACTIVE"
}'
 
Request to update incidents status by event IDs
curl --location --request POST 'https://<DLP Manager IP>:<DLP Manager port>/dlp/rest/v1/incidents/update' \
--header 'Authorization: Bearer <access token>' \
--header 'Content-Type: application/json' \
--data-raw '{
"event_ids" : [9315711207487646059, 5758754422662242777],
"type" : "INCIDENTS",
"action_type" : "TAG",
"value" : "custom tag"
}'
 

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
REST APIs > Update Incidents API > Request examples for the Update Incidents API
Copyright 2021 Forcepoint. All rights reserved.