Create whitelisted

Cortex XSOAR 6 API

post /indicators/whitelist/update

Create or update excluded indicators list

CURL
curl -X POST \ -H "Authorization: [[apiKey]]" \ -H "Accept: application/json" \ -H "Content-Type: application/json,application/xml" \ "https://hostname:443/indicators/whitelist/update" \ -d '{ "numericId" : 6, "reason" : "reason", "sequenceNumber" : 5, "reputations" : [ "reputations", "reputations" ], "sizeInBytes" : 5, "created" : "2000-01-23T04:56:07.000+00:00", "indexName" : "indexName", "primaryTerm" : 1, "whitelistTime" : "2000-01-23T04:56:07.000+00:00", "cacheVersn" : 0, "syncHash" : "syncHash", "type" : "type", "sortValues" : [ "sortValues", "sortValues" ], "version" : 2, "highlight" : { "key" : [ "highlight", "highlight" ] }, "modified" : "2000-01-23T04:56:07.000+00:00", "id" : "id", "locked" : true, "user" : "user", "value" : "value" }' \ -d ' 123456789 2000-01-23T04:56:07.000Z UNDEFINED_EXAMPLE_VALUE aeiou aeiou true 2000-01-23T04:56:07.000Z 123456789 123456789 aeiou aeiou 123456789 123456789 aeiou aeiou aeiou aeiou aeiou 123456789 2000-01-23T04:56:07.000Z '
Authentication: api_key Api Key "Authorization"
Request
Body
required
cacheVersn
optional
Number (Long)
format: int64
created
optional
Object
format: date-time
highlight
optional
Map
id
optional
String
indexName
optional
String
locked
optional
Boolean
modified
optional
Object
format: date-time
numericId
optional
Number (Long)
format: int64
primaryTerm
optional
Number (Long)
format: int64
reason
optional
String
reputations
optional
Array of strings
sequenceNumber
optional
Number (Long)
format: int64
sizeInBytes
optional
Number (Long)
format: int64
sortValues
optional
Array of strings
syncHash
optional
String
type
optional
String
user
optional
String
value
optional
String
version
optional
Number (Long)
format: int64
whitelistTime
optional
Object
format: date-time
Responses

WhitelistedIndicator

Body
WhitelistedIndicator Excluded indicator
cacheVersn
optional
Number (Long)
format: int64
created
optional
Object
format: date-time
highlight
optional
Map
id
optional
String
indexName
optional
String
locked
optional
Boolean
modified
optional
Object
format: date-time
numericId
optional
Number (Long)
format: int64
primaryTerm
optional
Number (Long)
format: int64
reason
optional
String
reputations
optional
Array of strings
sequenceNumber
optional
Number (Long)
format: int64
sizeInBytes
optional
Number (Long)
format: int64
sortValues
optional
Array of strings
syncHash
optional
String
type
optional
String
user
optional
String
value
optional
String
version
optional
Number (Long)
format: int64
whitelistTime
optional
Object
format: date-time