updateIncidentIndicator

Edit an indicator (version range / fixed versions; re-runs the matcher).

Examples

mutation UpdateIncidentIndicator($incidentId: String!, $indicatorId: String!, $input: UpdateIndicatorInput!) {
  updateIncidentIndicator(incidentId: $incidentId, indicatorId: $indicatorId, input: $input) {
    id
    incidentId
    kind
    value
    versionRange
    fixedVersions
    severity
    cvssScore
    addedAt
    source
    addedBy
    status
    url
    lastFetchedAt
    autoExpand
  }
}

Variables

This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.

{
  "incidentId": "example",
  "indicatorId": "example",
  "input": {
    "versionRange": "example",
    "fixedVersions": ["example"]
  }
}

curl -X POST \
https://api.cloud.ox.security/api/apollo-gateway \
-H 'Content-Type: application/json' \
-H 'Authorization: YOUR_API_TOKEN' \
-d '{
 "query": "mutation UpdateIncidentIndicator($incidentId: String!, $indicatorId: String!, $input: UpdateIndicatorInput!) { updateIncidentIndicator(incidentId: $incidentId, indicatorId: $indicatorId, input: $input) { id incidentId kind value versionRange fixedVersions severity cvssScore addedAt source addedBy status url lastFetchedAt autoExpand } }",
 "variables": {
    "incidentId": "example",
    "indicatorId": "example",
    "input": {
      "versionRange": "example",
      "fixedVersions": ["example"]
    }
  }
}'

const query = 'mutation UpdateIncidentIndicator($incidentId: String!, $indicatorId: String!, $input: UpdateIndicatorInput!) { updateIncidentIndicator(incidentId: $incidentId, indicatorId: $indicatorId, input: $input) { id incidentId kind value versionRange fixedVersions severity cvssScore addedAt source addedBy status url lastFetchedAt autoExpand } }';

fetch("https://api.cloud.ox.security/api/apollo-gateway", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "YOUR_API_TOKEN"
  },
  body: JSON.stringify({
    query: query,
    // This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.
    variables: {
      incidentId: "example",
      indicatorId: "example",
      input: {
        versionRange: "example",
        fixedVersions: ["example"]
      }
    }
  })
})
.then(response => response.json())
.then(result => console.log(JSON.stringify(result, null, 2)))
.catch(error => console.error('Error:', error));

import requests

query = 'mutation UpdateIncidentIndicator($incidentId: String!, $indicatorId: String!, $input: UpdateIndicatorInput!) { updateIncidentIndicator(incidentId: $incidentId, indicatorId: $indicatorId, input: $input) { id incidentId kind value versionRange fixedVersions severity cvssScore addedAt source addedBy status url lastFetchedAt autoExpand } }'

response = requests.post(
  "https://api.cloud.ox.security/api/apollo-gateway",
  headers={
    "Content-Type": "application/json",
    "Authorization": "YOUR_API_TOKEN"
  },
  json={
    "query": query,
    # This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.
    "variables": {
      "incidentId": "example",
      "indicatorId": "example",
      "input": {
        "versionRange": "example",
        "fixedVersions": ["example"]
      }
    }
  }
)

if response.status_code == 200:
    result = response.json()
    print(result)
else:
    print(f"Error: {response.status_code}")
    print(response.text)

Arguments

You can use the following argument(s) to customize your updateIncidentIndicator mutation.

Argument

Description

Supported fields

incidentId String! required

indicatorId String! required

input UpdateIndicatorInput! required

versionRange String fixedVersions [String!]

Fields

Return type: Indicator!

You can use the following field(s) to specify what information your updateIncidentIndicator mutation will return. Please note that some fields may have their own subfields.

Field

Description

Supported fields

id String!

incidentId String!

kind IndicatorKind!

value String!

versionRange String

fixedVersions [String!]!

severity IncidentSeverity

cvssScore Float

addedAt DateTime!

source String!

addedBy String

status String!

url String

lastFetchedAt DateTime

autoExpand Boolean

Last updated 6 days ago