https://community.splunk.com/t5/Splunk-SOAR/How-to-import-containers-via-rest-api/m-p/640328#M1162 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/255948">@dennyw</a>&nbsp;I think you would be better backing up and restoring to the other system *(must be the same version). The REST call you did pulls down individual files containing the container JSON.</P><P>I am not aware of a way to import the .gz files via REST with the only way being the manual press of the Import button.<BR /><BR />You may even be better off using a script to hit REST to GET from the old and POST to the new system. You would likely need to remove container id's and source_data_identifiers before POSTing.</P><P>As you can see there are a few ways to do things in SOAR!</P><P>-- If this helped, please mark as a solution! Happy SOARing --</P> Tue, 18 Apr 2023 08:21:48 GMT phanTom 2023-04-18T08:21:48Z https://community.splunk.com/t5/Splunk-SOAR/How-to-import-containers-via-rest-api/m-p/640327#M1161 <P>We have a need to migrate our phantom data to another instance including the containers.&nbsp;</P> <P>Though it's not listed in&nbsp;<A href="https://docs.splunk.com/Documentation/SOARonprem/6.0.0/PlatformAPI/RESTContainers" target="_blank" rel="noopener">REST Containers - Splunk Documentation</A>, i was able to export the containers via /rest/container/{id}/export</P> <P>however, i didn't find the rest endpoint for importing the containers.</P> <P>any advice will be appreciated.</P> Tue, 18 Apr 2023 08:57:35 GMT https://community.splunk.com/t5/Splunk-SOAR/How-to-import-containers-via-rest-api/m-p/640327#M1161 dennyw 2023-04-18T08:57:35Z https://community.splunk.com/t5/Splunk-SOAR/How-to-import-containers-via-rest-api/m-p/640328#M1162 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/255948">@dennyw</a>&nbsp;I think you would be better backing up and restoring to the other system *(must be the same version). The REST call you did pulls down individual files containing the container JSON.</P><P>I am not aware of a way to import the .gz files via REST with the only way being the manual press of the Import button.<BR /><BR />You may even be better off using a script to hit REST to GET from the old and POST to the new system. You would likely need to remove container id's and source_data_identifiers before POSTing.</P><P>As you can see there are a few ways to do things in SOAR!</P><P>-- If this helped, please mark as a solution! Happy SOARing --</P> Tue, 18 Apr 2023 08:21:48 GMT https://community.splunk.com/t5/Splunk-SOAR/How-to-import-containers-via-rest-api/m-p/640328#M1162 phanTom 2023-04-18T08:21:48Z