Update Incident - BlinkOps Documentation

Update an incident. Note: At least one of Status, Close Reason, Close Note or Assigned To is required.

Parameters

Parameter	Description
Assigned To	The email of the analyst to assign the incident to.
Close Note	A free-text note added when closing the incident.
Close Reason	Select the reason for closing the incident.
Incident ID	The ID of the incident to update.
Status	Select the new status of the incident.

Example Output

{
	"resources": [
		{
			"id": "string",
			"status": "closed",
			"close_reason": "valid",
			"close_note": "string",
			"assigned_to": "string"
		}
	]
}

Workflow Library Example

Update Incident with Cyberhaven and Send Results Via Email

Preview this Workflow on desktop