Close Incident | docs.d3security

Last updated: Aug 29, 2024

Adds a note to an incident and then closes it.

READER NOTE

This command is only applicable within an Incident Playbook.

Implementation	System
Command Category	System Utility
Tags	Incident

Inputs

Parameter Name	Required/Optional	Description	Sample Data
Incident Note	Optional	The note added to an incident upon its closure.	This incident is finished and closed by Tom

Output

Return Data

The returned result of this command. If some required parameters are not defined, this returned data could be empty. The returned result can be passed down directly to a subsequent command in playbooks.

Sample Data

JSON

Succeed

Context Data

The response data from the utility command.

Sample Data

JSON

{
    "incidentNumber": "20200526-23",
    "closeType": "Closed",
    "closeNote": "This incident is finished and closed by Tom",
    "closeDate": "May 26, 2020 17:07 China Standard Time",
    "result": "Succeed",
    "closedBy": "admin user"
}