Add Quick Actions to the Incident Overview

LAST UPDATED: OCTOBER 22, 2025

Add or update quick actions on the incident overview. Quick actions are pre-defined, ad-hoc commands that can be executed directly. If an action with the same name already exists, it will be overridden.

Implementation	Python
Command Category	System Utility
Tags	N/A

Inputs

Parameter Name

Required/Optional

Description

Sample Data

Incident number

Required

The incident number where the quick actions will be added or updated.

20241105-12

Quick actions

Required

A structured JSON array containing the details of quick actions to be added or updated. Each quick action should include fields such as the "ActionName", "CommandName", "IntegrationName"(optional), "ConnectionName"(optional), and "CommandParameters".

CODE

[
  {
    "ActionName": "Convert to Flat JSON Object",
    "CommandName": "ParseJsonObjectToFlattenJsonObject",
    "CommandParameters": {
      "Input": {
        "IPAddress": {
          "IP": "192.168.1.243",
          "User": "Jack"
        },
        "LoginTime": [
          {
            "Start": "2020-05-29 09:00:00",
            "End": "2020-05-29 11:20:00"
          },
          {
            "Start": "2020-05-28 09:00:00",
            "End": "2020-05-28 10:20:00"
          }
        ]
      }
    }
  },
  {
    "ActionName": "Update JSON Object Keys In JSON Array",
    "CommandName": "Update JSON Object Keys In JSON Array"
  },
  {
    "ActionName": "Sample Action2",
    "CommandName": "Base 64 Decode",
    "CommandParameters": {
      "String to decode": "aGVsbG8gd29ybGQ="
    }
  },
  {
    "ActionName": "Quick Action for Add Comment",
    "CommandName": "Add Comment To Issues",
    "IntegrationName": "Atlassian Jira Software",
    "CommandParameters": {
      "Issue IDs or Keys": [
        "D3CYBER-18",
        "D3CYBER-19"
      ],
      "Comment": "test comment",
      "Visibility Type": "role",
      "Visibility Value": "Simple Data"
    }
  }
]

Output

Return Data

The returned result of this command. If some required parameters are not defined, this returned data could be empty. The returned result can be passed down directly to a subsequent command in playbooks.

SAMPLE DATA

JSON

{
  "Status": "Successful"
}