What's new in REST API Version 29.0
IBM® QRadar® 7.6.0 introduces version 29.0 of the API endpoints.
Updated endpoints
RESTful API 29.0 introduces new categories of API endpoints and updates to existing endpoints:
- Asset Model
-
GET /asset_model/asset_bulk_tasks/{id}
PATCH /asset_model/assets
- Backup and Restore
-
GET /backup_and_restore/prechecks/connectivity/tasks/{task_id}
POST /backup_and_restore/prechecks/connectivity/unpaired_hosts
- Attack Timeline (Milestones)
-
GET /siem/milestone_generation_tasks
POST /siem/milestone_generation_tasks
GET /siem/milestone_generation_tasks/{task_id}
POST /siem/milestone_statistics
GET /siem/milestones
GET /siem/milestones/{milestone_id}
- Configuration - Custom Properties: A new is_list_type field (Boolean) is added to request and response objects for following endpoints.
-
GET /config/event_sources/custom_properties/regex_properties
POST /config/event_sources/custom_properties/regex_properties
GET /config/event_sources/custom_properties/regex_properties/{regex_property_id}
POST /config/event_sources/custom_properties/regex_properties/{regex_property_id}
- GUI App Framework: Following endpoints include a role_capabilities array in response objects.
-
GET /gui_app_framework/application_definitions
GET /gui_app_framework/application_definitions/{application_definition_id}
GET /gui_app_framework/applications
POST /gui_app_framework/applications
GET /gui_app_framework/applications/{application_id}
POST /gui_app_framework/applications/{application_id}