Skip to main content
POST
/
api
/
v2
/
incidents
/
across-workspaces
/
bulk-update
Bulk update incidents across workspaces
curl --request POST \
  --url https://api.example.com/api/v2/incidents/across-workspaces/bulk-update \
  --header 'Content-Type: application/json' \
  --data '
{
  "items": [
    {
      "id": "<string>",
      "status": "Active",
      "user": {
        "id": "<string>",
        "displayName": "<string>",
        "email": "<string>"
      },
      "workspace": "<string>",
      "removeAssignee": true,
      "comment": "<string>",
      "classification": "BenignPositive",
      "classificationReason": "InaccurateData",
      "incidentSource": "Sentinel"
    }
  ]
}
'
{
  "data": {
    "accepted": [
      "<string>"
    ],
    "forbidden": [
      {
        "incidentId": "<string>",
        "workspaceId": "<string>",
        "reason": "<string>"
      }
    ]
  },
  "meta": {
    "requestId": "<string>",
    "timestamp": "<string>"
  }
}

Documentation Index

Fetch the complete documentation index at: https://docs.contraforce.com/llms.txt

Use this file to discover all available pages before exploring further.

Body

application/json

v2 request body for the cross-workspace bulk incident update endpoint.

items
null | object[]

Response

OK

Standard v2 API response envelope for single-item responses.

data
object

Outcome of a bulk incident update request after per-incident authorization.

meta
object