Whitelists or deletes Indicator

Cortex XSOAR 6 API

post /indicator/whitelist

Whitelists or deletes an indicator entity In order to delete an indicator and not whitelist, set doNotWhitelist boolean field to true

CURL
curl -X POST \ -H "Authorization: [[apiKey]]" \ -H "Accept: application/json" \ -H "Content-Type: application/json,application/xml" \ "https://hostname:443/indicator/whitelist" \ -d '{ "manualScore" : true, "reason" : "reason", "reputations" : [ "reputations", "reputations" ], "reputation" : 0, "InvestigationId" : "InvestigationId", "doNotWhitelist" : true, "value" : "value", "entryId" : "entryId" }' \ -d ' aeiou true aeiou true aeiou 123456789 aeiou aeiou '
Authentication: api_key Api Key "Authorization"
Request
Body
optional
InvestigationId
optional
String
doNotWhitelist
optional
Boolean
entryId
optional
String
manualScore
optional
Boolean
reason
optional
String
reputation
optional
Number (Long)
format: int64
reputations
optional
Array of strings
value
optional
String
Responses

UpdateResponse

Body
notUpdated
optional
Number (Long)
format: int64
updatedIds
optional
Array of strings
uppdated
optional
Number (Long)
format: int64