Copy Incident Field Mapping
Adds the specified value to the system counter
Implementation | System |
Command Category | System Utility |
Tags | INTEGRATION INCIDENT FIELD MAPPING |
Inputs
Parameter Name | Required/Optional | Description | Sample Data |
---|---|---|---|
Integration to Copy From | Optional | Integration Name that is being copied from |
|
Integration to Copy To | Optional | Integration Name that is being copied to |
|
Output
Remote Command API
The D3 command API allows you to send requests to D3 SOAR to execute this utility command via REST API.
Request
POST
https:/{base_url}/{api_namespace}/api/Command/CopyIncidentFieldMapping
Headers
Please refer to the page Webhook Configuration Guide - Authentication Method: API Keys for more details.
Request Body
{
"Username": <Username here>,
"Site": <Site here>,
"CommandParams": {
"Integration to Copy From": <Source Integration Name here>,
"Integration to Copy To": <Destination Integration Name here>
}
}
Body Parameters
Parameter Name | Type | Required/Optional | Description |
---|---|---|---|
Username |
| Required | The username of your D3 SOAR account. |
Site |
| Required | The D3 SOAR site to run the remote command. |
Integration to Copy From |
| Optional | Integration Name that is being copied from |
Integration to Copy To |
| Optional | Integration Name that is being copied to |
Sample Request
SAMPLE DATA
{
"Username": "Admin",
"Site": "Security Operations",
"CommandParams": {
"Integration to Copy From": "Integration1",
"Integration to Copy To": "Integration2"
}
}
Response
Response Fields
Field Name | Type | Description |
---|---|---|
error |
| The error message if the API request has failed. |
returnData |
| The return data from the API request. |
contextData |
| The context data from the API request. |
Sample Response
{
"error": "",
"returnData": "Successful",
"rawData":"",
"contextData":[
{
"Site Name": "Default",
"Source Name": "Default",
"Data Copied": [
{
"Title": "myTtile",
"Description": "Test Description",
"Severity": "Low",
"Incident Category": "",
"Incident Type": "Active Shooter",
"Incident Creator": "D3Admin",
"Incident Owner": "D3Admin",
"Incident Playbook": "",
"Due In Date": "",
"Unique Key": ".MyUniqueKey",
"Tactics": ".MyTactics",
"Techniques": ".MyTechniques"
}
]
},
{
"Site Name": "MyOwnSite",
"Source Name": "MySource",
"Data Copied": [
{
"Title": "myTtile",
"Description": "Test Description",
"Severity": "High",
"Incident Category": "",
"Incident Type": "Active Shooter",
"Incident Creator": "D3Admin",
"Incident Owner": "D3Admin",
"Incident Playbook": "",
"Due In Date": "",
"Unique Key": ".MyUniqueKey",
"Tactics": ".MyTactics",
"Techniques": ".MyTechniques"
}
]
}
]
}