Modify Incident Form
LAST UPDATED: OCT 29, 2024
POST /Command/ModifyIncidentForm
Modifies the incident forms by either adding or deleting a section.
CAUTION
When a section is removed from a specific incident type, all incidents of that type will lose the section along with any associated dynamic field values.
READER NOTE
Only reusable form items can be added via this command.
Request
Authentication: API keys or JSON web tokens (JWT)
Body Parameters
Parameter Name | Type | Required/Optional | Description |
---|---|---|---|
Username |
| Required | The username of your D3 SOAR account. |
Site |
| Required | The D3 SOAR site to run the remote command. |
Incident Types |
| Required | The incident types to be modified. |
Section |
| Required | The section to be added or deleted. |
Action |
| Required | The modification performed. The options are:
Actions will execute idempotently, making no changes when adding a section that already exists or deleting a section that does not exist. |