ES Incident Review Restapi

[lpoko]

Does Splunk Enterprise provides any API to retrieve or modify Incidents by RestAPI?

Example:

• Get Incident information 
• Change Incident Status 
• Change Incident Severity 
• Change Incident Owner
• Add Tag to incident

[meetmshah · Accepted solution]

Hello @lpoko,

You can use "/services/notable_update"  from here - for most tasks https://docs.splunk.com/Documentation/ES/latest/API/NotableEventAPIreference

Please accept the solution if this helps!