Upload Messages - BlinkOps Documentation

Upload one or more messages to an incident. Note: The allowed number of recipients is up to 10,000 per message.

Parameters

Parameter	Description
Disposition	The disposition to set to the message, for example - `malware`.
Incident ID	The ID of the incident to attach the message to. Can be obtained from the response of `Create Incident` action.
Messages	An array of JSON objects representing messages. For example: `[ { “rfcMessageId”: “<MESSAGE_ID@host>”, “recipient_addresses”: [“user@example.com”], “sender”: “bad@example.com”, “subject”: “Subject”, “disposition”: “malware” } ]`
One Or Multiple Messages	Choose whether to upload one or multiple messages.
RFC Message ID	The RFC message ID. Note: This parameter must include angle brackets (`<`,`>`). For example `<abc123@mail.example.com>`.
Recipient Addresses	A comma-separated list of recipient email addresses.
Sender	The email address of the message sender.
Subject	The subject of the message.

Example Output

{
	"rfcMessageId": "<SA1PR13MB60556A43EBD392CA7B453D7FAE282@SA1PR13MB6055.namprd13.prod.outlook.com>",
	"incident_id": "b78ee40c-5c26-482d-9ae5-f0edacb82400",
	"incidentDisplayId": "18906",
	"uploadedRecipientsCount": 2
}

Workflow Library Example

Upload Messages with Proofpoint Threat Protection and Send Results Via Email

Preview this Workflow on desktop