Remove Incident Tags
POST /Command/RemoveIncidentTags
Remove Incident Tags from the current incident.
Request
Authentication: API keys or JSON web tokens (JWT)
Body Parameters
Parameter Name | Type | Required/Optional | Description |
---|---|---|---|
Username |
| Required | The username of your D3 SOAR account. |
Site |
| Required | The D3 SOAR site to run the remote command. |
Incident Number |
| Required | The incident number to remove incident tags. |
Tags |
| Optional | The incident tags will be removed from the array. Examples: a, b, c or ["a", "b", "c"]. If input of Tags is empty, then remove all; otherwise, just remove the selected tags. |