CreateIncidentRequest

CreateIncidentRequest schema from Palo Alto Networks Cortex XSOAR REST API

Cloud SecurityCybersecurityFirewallNetwork SecuritySASESOARThreat IntelligenceXDR

Properties

Name	Type	Description
name	string	Incident name.
type	string	Incident type name.
severity	integer
owner	string
occurred	string
details	string
labels	array
createInvestigation	boolean	Whether to automatically create an investigation for this incident.
CustomFields	object
rawJson	string

View JSON Schema on GitHub

JSON Schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "CreateIncidentRequest",
  "description": "CreateIncidentRequest schema from Palo Alto Networks Cortex XSOAR REST API",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-schema/cortex-xsoar-api-create-incident-request-schema.json",
  "type": "object",
  "properties": {
    "name": {
      "type": "string",
      "description": "Incident name."
    },
    "type": {
      "type": "string",
      "description": "Incident type name."
    },
    "severity": {
      "type": "integer",
      "enum": [
        0,
        1,
        2,
        3,
        4,
        5
      ]
    },
    "owner": {
      "type": "string"
    },
    "occurred": {
      "type": "string",
      "format": "date-time"
    },
    "details": {
      "type": "string"
    },
    "labels": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "type": {
            "type": "string"
          },
          "value": {
            "type": "string"
          }
        }
      }
    },
    "createInvestigation": {
      "type": "boolean",
      "default": true,
      "description": "Whether to automatically create an investigation for this incident."
    },
    "CustomFields": {
      "type": "object",
      "additionalProperties": true
    },
    "rawJson": {
      "type": "string"
    }
  },
  "required": [
    "name"
  ]
}