SecOps IDE Case Creation Issue - Add Case Description

Question

Hi Everyone,

I have a question that I'm hoping you may know the answer to:

I'm creating a SecOps Scheduled Job
The job performs some functionality (RSS Feed) and I want it to create a case
Since it's not a log based event (more of a trigger), I need to trigger case creation myself (Python IDE)
I've only managed to create a manual case using this method, not sure if there is a better way. (/api/external/v1/cases/CreateManualCase)

Issue:

I can't figure out how to add in a case description to the case during case creation.
Attempted to Change Case Description API (/api/external/v1/cases/ChangeCaseDescription) but I can't figure out how to get the Case ID as the siemplify.case_id functionality does not return any information (I'm assuming that the case is being created while this is being called).

Request:

Page 1 / 1

If anyone is looking at this, you can retrieve the response from the response.json() field and then use that to call the case description endpoint.

I think you can use “reason” in the main JSON schema, is that what you search for?

_K_O · Accepted Answer

If anyone is looking at this, you can retrieve the response from the response.json() field and then use that to call the case description endpoint.

quotermice · Answer

I think you can use “reason” in the main JSON schema, is that what you search for?

Sign up