featured_fields_replace_ip_addresses
Replace all featured IP addresses in your environment by submitting a new list of IPs, ranges, or CIDRs with comments. This API deletes existing featured IPs and sets the provided ones.
Instructions
Replace Featured IP Addresses
Replace the featured IP addresses listed in your environment.
Note: Running this API will delete all existing IP addresses.
Required license: Cortex XSIAM Premium or Cortex XSIAM Enterprise or Cortex XSIAM Enterprise Plus
[POST /public_api/v1/featured_fields/replace_ip_addresses] · Incidents
Example request body:
{
"request_data": {
"fields": [
{
"value": "1.2.3.4",
"comment": "A single featured IP"
},
{
"value": "192.111.1.0-192.111.1.255",
"comment": "Featured IP range"
},
{
"value": "7.7.7.7/16",
"comment": "Featured CIDR"
}
]
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| request_data | Yes |