Forum Discussion

baddeacs's avatar
baddeacs
Copper Contributor
Dec 10, 2020
Solved

Azure Sentinel REST API update existing incident - version conflict error

Attempting to close an existing incident  using PUT REST Api for create /update incident:   using this request body   {   properties: {     severity: "High",      "classification": "Undetermi...
  • Thijs Lecomte's avatar
    Dec 10, 2020
    You need to retrieve and provide the 'etag' value in your put request.

    So you need to do a get for the incident first, retrieve the 'etag' property from there and then provide the etag value in your new request

Resources