misp-book icon indicating copy to clipboard operation
misp-book copied to clipboard

Automation: How to update Event (edit)

Open esellier opened this issue 6 years ago • 0 comments

The Automation document does not describe how to update (EDIT) an event through the API

Should be added (from what I found in the PHP code): POST https://localhost/events/EVENTID The request body must include the timestamp which should be greater than the Event timestamp in DB. And all the Event data to update. UUID remains unchanged. 'analysis', 'threat_level_id', 'info', 'distribution', 'date' remain unchanged if not set in the request body, as well as objects and/or attributes.

esellier avatar Feb 20 '19 16:02 esellier