MISP
/
misp-book
mirror of https://github.com/MISP/misp-book
2
0
Fork 0
Code Issues Releases Wiki Activity

Automation: Add or remove tags from events section added

pull/7/head
Alexandre Dulaunoy 2015-11-06 07:49:03 +01:00
parent 8e8ecee1e9
commit df7dc7581a
1 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
automation/README.md
View File

@ -726,3 +726,24 @@ The following optional parameters are expected:
<dd>The analysis level of the newly created event, if applicable. [0-2] threat_level_id: The threat level ID of the newly created event, if applicatble. [0-3]</dd>
</dl>
## Add or remove tags from events
You can add or remove an existing tag from an event in the following way:
~~~~
https://<misp url>/events/addTag
https://<misp url>/events/removeTag
~~~~
Just POST a JSON object in the following format (to the appropriate API depending on whether you want to add or delete a tag from an event):
~~~~json
{"request": {"Event": {"id": "228", "tag": "8"}}}
~~~~
Where "tag" is the ID of the tag. You can also use the name of the tag the following way (has to be an exact match):
~~~~json
{"request": {"Event": {"id": "228", "tag": "OSINT"}}}
~~~~