Forum Discussion

baddeacs's avatar
baddeacs
Copper Contributor
Dec 05, 2020
Solved

Azure Sentinel REST API create incident

Trying to create a new incident using https://docs.microsoft.com/en-us/rest/api/securityinsights/incidents/createorupdate   'Tryit' from the above page does not work for Create Incident.  The List ...
apis
  • GaryBushey's avatar
    GaryBushey
    Dec 07, 2020

    baddeacs In addition to what Sarah_Young wrote about the ID (which should actually be a GUID), the default body listed is not correct.  I had to modify it to look like:

     

    {
  properties: {
    severity: "High",
    status: "New",
    title: "Example Title"
  }
}
GaryBushey's avatar
GaryBushey
Bronze Contributor
Dec 07, 2020

baddeacs In addition to what Sarah_Young wrote about the ID (which should actually be a GUID), the default body listed is not correct.  I had to modify it to look like:

 

{
  properties: {
    severity: "High",
    status: "New",
    title: "Example Title"
  }
}
baddeacs's avatar
baddeacs
Copper Contributor
Dec 07, 2020

GaryBushey Thank you, all good.  

Resources