removeIncidentIndicator

Remove (soft) an indicator from the monitored scope (re-runs the matcher).

Examples

mutation RemoveIncidentIndicator($incidentId: String!, $indicatorId: String!) {
  removeIncidentIndicator(incidentId: $incidentId, indicatorId: $indicatorId)
}

Variables

This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.

{
  "incidentId": "example",
  "indicatorId": "example"
}

curl -X POST \
https://api.cloud.ox.security/api/apollo-gateway \
-H 'Content-Type: application/json' \
-H 'Authorization: YOUR_API_TOKEN' \
-d '{
 "query": "mutation RemoveIncidentIndicator($incidentId: String!, $indicatorId: String!) { removeIncidentIndicator(incidentId: $incidentId, indicatorId: $indicatorId) }",
 "variables": {
    "incidentId": "example",
    "indicatorId": "example"
  }
}'

const query = 'mutation RemoveIncidentIndicator($incidentId: String!, $indicatorId: String!) { removeIncidentIndicator(incidentId: $incidentId, indicatorId: $indicatorId) }';

fetch("https://api.cloud.ox.security/api/apollo-gateway", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "YOUR_API_TOKEN"
  },
  body: JSON.stringify({
    query: query,
    // This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.
    variables: {
      incidentId: "example",
      indicatorId: "example"
    }
  })
})
.then(response => response.json())
.then(result => console.log(JSON.stringify(result, null, 2)))
.catch(error => console.error('Error:', error));

import requests

query = 'mutation RemoveIncidentIndicator($incidentId: String!, $indicatorId: String!) { removeIncidentIndicator(incidentId: $incidentId, indicatorId: $indicatorId) }'

response = requests.post(
  "https://api.cloud.ox.security/api/apollo-gateway",
  headers={
    "Content-Type": "application/json",
    "Authorization": "YOUR_API_TOKEN"
  },
  json={
    "query": query,
    # This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.
    "variables": {
      "incidentId": "example",
      "indicatorId": "example"
    }
  }
)

if response.status_code == 200:
    result = response.json()
    print(result)
else:
    print(f"Error: {response.status_code}")
    print(response.text)

Arguments

You can use the following argument(s) to customize your removeIncidentIndicator mutation.

Argument

Description

Supported fields

incidentId String! required

indicatorId String! required

Fields

Return type: Boolean!

You can use the following field(s) to specify what information your removeIncidentIndicator mutation will return. Please note that some fields may have their own subfields.

Last updated 6 days ago

const query = 'mutation RemoveIncidentIndicator($incidentId: String!, $indicatorId: String!) { removeIncidentIndicator(incidentId: $incidentId, indicatorId: $indicatorId) }';

fetch("https://api.cloud.ox.security/api/apollo-gateway", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "YOUR_API_TOKEN"
  },
  body: JSON.stringify({
    query: query,
    // This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.
    variables: {
      incidentId: "example",
      indicatorId: "example"
    }
  })
})
.then(response => response.json())
.then(result => console.log(JSON.stringify(result, null, 2)))
.catch(error => console.error('Error:', error));

import requests

query = 'mutation RemoveIncidentIndicator($incidentId: String!, $indicatorId: String!) { removeIncidentIndicator(incidentId: $incidentId, indicatorId: $indicatorId) }'

response = requests.post(
  "https://api.cloud.ox.security/api/apollo-gateway",
  headers={
    "Content-Type": "application/json",
    "Authorization": "YOUR_API_TOKEN"
  },
  json={
    "query": query,
    # This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.
    "variables": {
      "incidentId": "example",
      "indicatorId": "example"
    }
  }
)

if response.status_code == 200:
    result = response.json()
    print(result)
else:
    print(f"Error: {response.status_code}")
    print(response.text)