Resource: Webhook
This service is available for customers who migrated SOAR to a customer managed project and have the Chronicle API enabled. Model represents the webhook definition.
JSON representation |
---|
{
"name"
:
string
,
"displayName"
:
string
,
"description"
:
string
,
"environment"
:
string
,
"enabled"
:
boolean
,
"jsonExampleData"
:
string
,
"webhookMapping"
:
{
object (
|
Fields | |
---|---|
name
|
Identifier. Guid of the webhook |
displayName
|
Required. Display name of the webhook. |
description
|
Required. Description of the webhook |
environment
|
Required. The default environment where the webhook will be ingested if no specific environment is provided. |
enabled
|
Required. Flag that indicates if the webhook is enabled or not. |
jsonExampleData
|
Optional. Json example data that will be used for mapping. |
webhookMapping
|
Optional. Mapping rules of the webhook. |
postfix
|
Optional. Postfix of the webhook. |
WebhookMapping
Configuration mapping rules that holds for each field - a rule, a string format used to tell the backend where which field and how, to extract the value off the received webhook request when it will arrive.
JSON representation |
---|
{ "webhookInstanceId" : string , "ticketId" : string , "sourceSystem" : string , "mappingName" : string , "deviceVendor" : string , "ruleGenerator" : string , "startTime" : string , "environment" : string , "description" : string , "displayId" : string , "reason" : string , "deviceProduct" : string , "endTime" : string , "priority" : string , "eventsList" : string , "eventProduct" : string , "event" : string } |
Fields | |
---|---|
webhookInstanceId
|
Optional. the webhook instance identifier, must be added for foreign key detection with the infra with the infra |
ticketId
|
Optional. Mapping rule of the ticket id field. |
sourceSystem
|
Required. Mapping rule of the source systemfield. |
mappingName
|
Optional. Mapping rule of the name field. |
deviceVendor
|
Required. Mapping rule of the device vendor field. |
ruleGenerator
|
Optional. Mapping rule of the rule generator field. |
startTime
|
Optional. Mapping rule of the start time field. |
environment
|
Optional. Mapping rule of the environment field. |
description
|
Optional. Mapping rule of the description field. |
displayId
|
Optional. Mapping rule of the display id field. |
reason
|
Optional. Mapping rule of the reason field. |
deviceProduct
|
Optional. Mapping rule of the device product field. |
endTime
|
Optional. Mapping rule of the end time field. |
priority
|
Optional. Mapping rule of the priority field. |
eventsList
|
Optional. Mapping rule of the events list field. |
eventProduct
|
Optional. Mapping rule of the event product field. |
event
|
Optional. Mapping rule of the event name field. |
Methods |
|
---|---|
|
Create a SOAR webhook configuration. |
|
Delete a webhook. |
|
Exports logs for a given webhook. |
|
Get a single webhook. |
|
Get a log for a given webhook. |
|
Get statistics for a given webhook. |
|
Ingest data for a given webhook. |
|
Lists existing SOAR webhooks. |
|
Update a webhook. |
|
RevokeUrl revokes a previously registered webhook URL, invalidating it and preventing further access. |