update_entities
This function adds the new entities to the alert.
siemplify.update_entities(updated_entities)
Parameters
Param Name | Param Type | Possible Values | Comments | Mandatory Parameter |
---|---|---|---|---|
updated_entities | list | [“GOOGLE.COM”, “8.8.8.8”] | List of entities to add to the case. | Yes |
Return Type
NoneType
Example
Sample code
from SiemplifyAction import SiemplifyAction
siemplify = SiemplifyAction()
new_entities = ["GOOGLE.COM", "1.2.3.4"]
siemplify.update_entities(updated_entities=new_entities)
Result Behavior
The selected alerts via the scope gets new entities added if they are not present in the alert.
Result Value
None