Forum Discussion
KubaTom
Jun 28, 2023Brass Contributor
Issues with Threat Intelligence Upload Indicators API (Preview)
Hi,
Due to Threat Intelligence Platforms connector being deprecated, I'm moving on to the new Threat Intelligence Upload Indicators API (Preview). It installed alright, but I'm struggling with getting the logic app to POST to the new URI due to
{"error":{"code":"UploadIndicatorsValidationErrors","message":"Indicators array is required and cannot be empty. ","target":null,"additionalInfo":null}}
Same is happening even when I'm trying to post a sample request from the reference page:
https://learn.microsoft.com/en-us/azure/sentinel/upload-indicators-api#sample-request-body
Has anyone managed to get this to work?
Cheers!
KubaT
- whiteHatCopper Contributor
I have the same issue, did you found a solution for that in the meantime? The array is present and exactly the same as from the reference page....
- whiteHatCopper ContributorThe solution is to write "indicators" instead of "value" in the request body, the documentation seems to be wrong, at least for the V2 (Preview) (preview) step 😉