Update Incidents' Owner In Bulk‎

POST /Command/UpdateIncidentOwnerInBulk

Update multiple incidents' owner by the input incident numbers and owner name.

Request

Authentication: API keys or JSON web tokens (JWT)

Body Parameters

Parameter Name	Type	Required/Optional	Description
Username	`string`	Required	The username of your D3 SOAR account.
Site	`string`	Required	The D3 SOAR site to run the remote command.
Incident Numbers	`array<string>`	Optional	The array of incident numbers of incidents whose owner will be updated.
Owner	`string`	Optional	The name of the new owner of the incidents.
Username	`string`	Optional	The username of user who performs the update. This username will be used only when the task is run automatically.

Body Sample Data

application/json

JSON

{
  "Username": "Admin",
  "Site": "Security Operations",
  "CommandParams": {
    "Incident Numbers": ["20210127-198","20210127-197"],
    "Owner": "admin user",
    "Username": "admin user"
  }
}

Response

200 OK

application/json

Field Name	Type	Description
error	`string`	The error message if the API request has failed.
returnData	`string`	The return data from the API request.
contextData	`array<JSON Object>`	The context data from the API request.

JSON

{
    "error": "",
    "returnData": "Successful",
    "contextData": [
        {
            "Incident Number": "20210127-198",
            "Incident Owner": "admin user",
            "Result": "Successful"
        },
        {
            "Incident Number": "20210127-197",
            "Incident Owner": "admin user",
            "Result": "Successful"
        }
    ]
}

401 Unauthorized

application/json

Response Fields

Field Name	Type	Description
Error	`string`	A error message when the API request fails.

Sample Data

CODE

{"Error": "Invalid authentication key."}

429 TooManyRequests

application/json

Response Fields

Field Name	Type	Description
Error	`string`	A error message when the API request fails.

Sample Data

CODE

{"Error": "The request exceeds rate limits or is otherwise blocked by rate limiting policies."}

500 InternalServerError

application/json

Response Fields

Field Name	Type	Description
Error	`string`	A error message when the API request fails.

Sample Data

CODE

{"Error": "Unexpected Error."}