Remove Incident Tags‎

POST /Command/RemoveIncidentTags

Remove Incident Tags from the current incident.

Request

Authentication: API keys or JSON web tokens (JWT)

Body Parameters

Parameter Name	Type	Required/Optional	Description
Username	`string`	Required	The username of your D3 SOAR account.
Site	`string`	Required	The D3 SOAR site to run the remote command.
Incident Number	`string`	Required	The incident number to remove incident tags.
Tags	`array<string>`	Optional	The incident tags will be removed from the array. Examples: a, b, c or ["a", "b", "c"]. If input of Tags is empty, then remove all; otherwise, just remove the selected tags.

Body Sample Data

application/json

CODE

{
  "Username": "Admin",
  "Site": "Security Operations",
  "CommandParams": {
    "Incident Number": "20230714-3",
    "Tags": [
      "test6",
      "test7"
    ]
  }
}

Response

200 OK

application/json

Field Name	Type	Description
error	`string`	The error message if the API request has failed.
returnData	`JSON Object`	The return data from the API request.

CODE

{
    "error": "",
    "returnData": {
      "Status": "Successful",
      "Data": {
          "incidentNumber": "20230714-3",
          "Tags": [
              "test4",
              "test5"
          ],
          "modifiedDate": "7/14/2023 5:19:09 PM",
          "result": "Successful",
          "modifiedBy": "Jackie XX"
      }
    }
}

401 Unauthorized

application/json

Response Fields

Field Name	Type	Description
Error	`string`	A error message when the API request fails.

Sample Data

CODE

{"Error": "Invalid authentication key."}

429 TooManyRequests

application/json

Response Fields

Field Name	Type	Description
Error	`string`	A error message when the API request fails.

Sample Data

CODE

{"Error": "The request exceeds rate limits or is otherwise blocked by rate limiting policies."}

500 InternalServerError

application/json

Response Fields

Field Name	Type	Description
Error	`string`	A error message when the API request fails.

Sample Data

CODE

{"Error": "Unexpected Error."}