Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

ModifyIncident API

The Modified Incident API makes use of the POST method to modify the incident entry. It supports basic, access token, and IAM token authentication. Access and IAM tokens expire within 10 minutes.

Any user tenant user that has the Incident Management role can run the API.

Pass access and IAM tokens to the APIs as Bearer Token. Tokens are expired in 10 minutes.

API POST calls the endpoint:

https://www.myshn.net/shnapi/rest/external/api/v1/modifyIncidents

The following are some examples of the API body:

To modify status of a single incident that was returned by queryIncidents API (see above):

[
{
"incidentId":"DLP-108",
"changeRequests":
{
"WORKFLOW_STATUS":"RESOLVED"
}
}
]

 

To modify status of multiple incidents:


[
{
"incidentId":"DLP-108",
"changeRequests":

"WORKFLOW_STATUS":"RESOLVED"
}
},

{
"incidentId":"DLP-109",
"changeRequests":

"WORKFLOW_STATUS":"PENDING"
}
}
]

response:

{

    "headers": {},

    "body": {

        "actualLimit": 1,

        "apiElapsedMillis": 3004,

        "error": null,

        "nextOffset": null,

        "nextStartTime": null,

        "source": "shnapi-0296f506c07a6ec34.node.usprod.consul"

    },

    "statusCode": "OK",

    "statusCodeValue": 200

  • Was this article helpful?