Custom action REST API endpoints
Custom action endpoints are available in the IBM® QRadar® API that you can use to aid application development.
| Endpoint | Parameters | Description |
|---|---|---|
| GET /analytics/custom_actions/actions | fields, range, filter | Retrieves a list of available custom actions. |
| POST /analytics/custom_actions/actions | fields, custom_action | Creates a new custom action with the supplied fields. |
| GET /analytics/custom_actions/actions/{action_id} | action_id, fields | Retrieves a custom action based on the supplied action_id. |
| POST /analytics/custom_actions/actions/{action_id} | action_id, fields, custom_action | Updates an existing custom action. |
| DELETE /analytics/custom_actions/actions/{action_id} | action_id | Deletes an existing custom action. |
| GET /analytics/custom_actions/interpreters | fields, Range, filter | Retrieves a list of available custom action interpreters. |
| GET /analytics/custom_actions/interpreters/{interpreter_id} | interpreter_id, fields | Retrieves a custom action interpreter based on the interpreter ID. |
| GET /analytics/custom_actions/scripts | application id | Retrieves a list of meta-data for available custom action script files. |
| POST /analytics/custom_actions/scripts | fields, file | Creates a new custom action script file. |
| GET /analytics/custom_actions/scripts/{script_id} | script_id, fields | Retrieves meta-data of a custom action script file based on supplied script_id. |
| POST /analytics/custom_actions/scripts/{script_id} | script_id, fields, file | Updates an existing custom action script file. |
| DELETE /analytics/custom_actions/scripts/{script_id} | script_id | Deletes an existing custom action script file. |
For more information, see the API documentation page on your QRadar Console: https://<Console_IP>/api_doc. Alternatively, see the IBM QRadar API Guide.