Demisto Incidentfields API
The Incidentfields API from Demisto — 2 operation(s) for incidentfields.
The Incidentfields API from Demisto — 2 operation(s) for incidentfields.
swagger: '2.0'
info:
description: 'This is the public REST API to integrate with the demisto server.
HTTP request can be sent using any HTTP-client.
For an example dedicated client take a look at: https://github.com/demisto/demisto-py.
Requests must include API-key that can be generated in the Demisto web client under ''Settings'' -> ''Integrations'' -> ''API keys''
Optimistic Locking and Versioning\:
When using Demisto REST API, you will need to make sure to work on the latest version of the item (incident, entry, etc.), otherwise, you will get a DB version error (which not allow you to override a newer item).
In addition, you can pass ''version\: -1'' to force data override (make sure that other users data might be lost).
Assume that Alice and Bob both read the same data from Demisto server, then they both changed the data, and then both tried to write the new versions back to the server. Whose changes should be saved? Alice’s? Bob’s?
To solve this, each data item in Demisto has a numeric incremental version.
If Alice saved an item with version 4 and Bob trying to save the same item with version 3, Demisto will rollback Bob request and returns a DB version conflict error.
Bob will need to get the latest item and work on it so Alice work will not get lost.
Example request using ''curl''\:
```
curl ''https://hostname:443/incidents/search'' -H ''content-type: application/json'' -H ''accept: application/json'' -H ''Authorization: <API Key goes here>'' --data-binary ''{"filter":{"query":"-status:closed -category:job","period":{"by":"day","fromValue":7}}}'' --compressed
```'
title: Demisto Apikeys Incidentfields API
version: 2.0.0
host: hostname:443
schemes:
- https
consumes:
- application/json
- application/xml
produces:
- application/json
security:
- api_key: []
- csrf_token: []
- x-xdr-auth-id: []
tags:
- name: Incidentfields
paths:
/incidentfields/associatedTypes/{type}:
get:
description: Get all incident fields associated with incident type
summary: Get all incident fields associated with incident type
operationId: getIncidentsFieldsByIncidentType
parameters:
- type: string
description: the name (case sensitive) of the incident type
name: type
in: path
required: true
responses:
'200':
description: Returns a list of incident fields associated with the incident type
schema:
type: array
items:
$ref: '#/definitions/IncidentField'
tags:
- Incidentfields
/incidentfields/import:
post:
description: Import an incidents field to Cortex XSOAR
consumes:
- multipart/form-data
produces:
- application/json
summary: Import an incidents field
operationId: importIncidentFields
parameters:
- type: file
description: file
name: file
in: formData
required: true
responses:
'200':
description: The saved incident field
schema:
$ref: '#/definitions/IncidentField'
tags:
- Incidentfields
definitions:
GridColumn:
type: object
title: GridColumn ...
properties:
displayName:
type: string
x-go-name: DisplayName
fieldCalcScript:
type: string
x-go-name: FieldCalcScript
isDefault:
type: boolean
x-go-name: IsDefault
isReadOnly:
type: boolean
x-go-name: IsReadOnly
key:
type: string
x-go-name: Key
required:
type: boolean
x-go-name: Required
script:
type: string
x-go-name: Script
selectValues:
type: array
items:
type: string
x-go-name: SelectValues
type:
type: string
x-go-name: Type
width:
type: integer
format: int64
x-go-name: Width
x-go-package: github.com/demisto/server/domain
FieldGroup:
description: FieldGroup is the field group
type: number
format: double
x-go-package: github.com/demisto/server/domain
IncidentField:
type: object
title: IncidentField ...
properties:
associatedToAll:
type: boolean
x-go-name: AssociatedToAll
associatedTypes:
description: AssociatedTypes - list of incident (case) types IDs related to specific incident field
type: array
items:
type: string
x-go-name: AssociatedTypes
breachScript:
type: string
x-go-name: BreachScript
caseInsensitive:
type: boolean
x-go-name: CaseInsensitive
cliName:
type: string
x-go-name: CliName
closeForm:
type: boolean
x-go-name: CloseForm
columns:
type: array
items:
$ref: '#/definitions/GridColumn'
x-go-name: GridColumns
commitMessage:
type: string
x-go-name: CommitMessage
content:
type: boolean
x-go-name: Content
defaultRows:
type: array
items:
type: object
additionalProperties:
type: object
x-go-name: DefaultRows
description:
type: string
x-go-name: Description
editForm:
type: boolean
x-go-name: EditForm
fieldCalcScript:
type: string
x-go-name: FieldCalcScript
group:
$ref: '#/definitions/FieldGroup'
hidden:
type: boolean
x-go-name: Hidden
id:
type: string
x-go-name: ID
isReadOnly:
type: boolean
x-go-name: IsReadOnly
locked:
type: boolean
x-go-name: Locked
modified:
type: string
format: date-time
x-go-name: Modified
name:
type: string
x-go-name: Name
neverSetAsRequired:
type: boolean
x-go-name: NeverSetAsRequired
ownerOnly:
type: boolean
x-go-name: OwnerOnly
placeholder:
type: string
x-go-name: Placeholder
prevName:
type: string
x-go-name: PrevName
required:
type: boolean
x-go-name: Required
script:
type: string
x-go-name: Script
selectValues:
type: array
items:
type: string
x-go-name: SelectValues
shouldCommit:
type: boolean
x-go-name: ShouldCommit
sla:
type: integer
format: int64
x-go-name: SLA
sortValues:
type: array
items:
type: string
x-go-name: SortValues
system:
type: boolean
x-go-name: System
systemAssociatedTypes:
type: array
items:
type: string
x-go-name: SystemAssociatedTypes
threshold:
type: number
format: double
x-go-name: Threshold
type:
type: string
x-go-name: Type
unmapped:
type: boolean
x-go-name: Unmapped
unsearchable:
type: boolean
x-go-name: UnSearchable
useAsKpi:
type: boolean
x-go-name: UseAsKpi
validatedError:
type: string
x-go-name: ValidatedError
validationRegex:
type: string
x-go-name: ValidationRegex
vcShouldIgnore:
type: boolean
x-go-name: VCShouldIgnore
version:
type: integer
format: int64
x-go-name: Versn
x-go-package: github.com/demisto/server/domain
securityDefinitions:
api_key:
type: apiKey
name: Authorization
in: header
csrf_token:
type: apiKey
name: X-XSRF-TOKEN
in: header
x-xdr-auth-id:
type: apiKey
name: x-xdr-auth-id
in: header