Close MCASB alert via API

%3CLINGO-SUB%20id%3D%22lingo-sub-1945106%22%20slang%3D%22en-US%22%3EClose%20MCASB%20alert%20via%20API%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1945106%22%20slang%3D%22en-US%22%3E%3CPRE%3E%3CSPAN%3EGood%20afternoon%20people.%0A%0AI%20am%20drawing%20a%20flow%20in%20the%20Logic%20App%20to%20close%20the%20alert%20in%20MCAS.%0A%0AI%20have%20little%20experience%20with%20API%20and%20would%20like%20to%20get%20help.%0A%0AI%20was%20using%20the%20API%20call%20via%20the%20path%20%5B%0A%5BXXXX.us3.portal.cloudappsecurity.com%2Fapi%2Fv1%2Falerts%2FID_ALERT%2Fdismiss%2F%5Dto%20end%20the%20alert%20as%20a%20false%20positive.%0A%0AThe%20documentation%20updated%20and%20reported%20that%20this%20feature%20is%20obsolete%2C%0Apassing%20using%20the%20path%20%5Bapi%20%2F%20v1%20%2F%20alerts%20%2F%20close_false_positive%20%2F%5D%20with%20filters%2C%20as%20reported%20here%20%5Bdocs.microsoft.com%2Fen-us%2Fcloud-app-security%2Fapi-alerts-close-false-positive%20%5D%0A%0AThe%20point%20is%20that%20I%20am%20not%20sure%20how%20to%20pass%20the%20filters%20through%20the%20Logic%20APP%20in%20HTTP%20POST%20of%20this%20new%20format.%0A%0ACan%20anyone%20help%20me%20in%20this%20regard%3F%0A%0AOld%20process%3A%3CBR%20%2F%3E%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22process.PNG%22%20style%3D%22width%3A%20819px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F236938iE54E59B1CD94994A%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22process.PNG%22%20alt%3D%22process.PNG%22%20%2F%3E%3C%2FSPAN%3E%3CBR%20%2F%3E%3C%2FSPAN%3E%3C%2FPRE%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CPRE%3E%26nbsp%3B%3C%2FPRE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1945106%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EApp%20Connectors%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ECloud%20App%20Security%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1953750%22%20slang%3D%22en-US%22%3ERe%3A%20Close%20MCASB%20alert%20via%20API%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1953750%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F670054%22%20target%3D%22_blank%22%3E%40Luizao_f%3C%2FA%3E%26nbsp%3BPlease%2C%20try%20this%20one%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fgraph%2Fapi%2Falert-update%3Fview%3Dgraph-rest-1.0%26amp%3Btabs%3Dhttp%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EUpdate%20alert%20-%20Microsoft%20Graph%20v1.0%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor
Good afternoon people.

I am drawing a flow in the Logic App to close the alert in MCAS.

I have little experience with API and would like to get help.

I was using the API call via the path [
[XXXX.us3.portal.cloudappsecurity.com/api/v1/alerts/ID_ALERT/dismiss/]to end the alert as a false positive.

The documentation updated and reported that this feature is obsolete,
passing using the path [api / v1 / alerts / close_false_positive /] with filters, as reported here [docs.microsoft.com/en-us/cloud-app-security/api-alerts-close-false-positive ]

The point is that I am not sure how to pass the filters through the Logic APP in HTTP POST of this new format.

Can anyone help me in this regard?

Old process:

process.PNG
 
 

 

1 Reply
www.000webhost.com