Disable/Enable Integration via API/Playbook/Automation

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Disable/Enable Integration via API/Playbook/Automation

L1 Bithead

Hi Guys,

I have list of integration instances that i need to disable/enable in one click.

I didn't see any function or command in the system that can do it.

There is any other way to do that?


L4 Transporter

Hi @BHalifa, we do not recommend you do this and the below instructions may only apply for XSOAR 6.


You need to return the entire integration object to make changes, so you first need to get the integration object. 


Use POST /settings/integration/search with payload {"query":"<search for integration>"} -> process result which might a huge list of integrations. You need to extract the object for the integration you want to modify.


In the above returned object, you need to change version and enabled before adding as a payload to the below API call.

PUT /settings/integration + Above payload


You can run the above calls using the Core REST API integration. If you are unsure about Cortex APIs and Python do not use this method.

Hi, Thank you!

Why I need to change the version? the version was 4 so I just added 1 (now its 5)

Im getting:

{"id":"errOptimisticLock","status":400,"title":"Optimistic lock error","detail":"Optimistic lock error","error":"DB Version '4' and Insert version '5' do not match for id: 2bafa3b3-1fd7-48a9-85d3-145e1b12e323 on bucket [modules] [moduleInstances] (15)","encrypted":false,"multires":null}


Without changing the version it works perfect.


BTW this is my script:

import requests
import json
xsoar_instance = 'https://my-xsoar'
url = f'{xsoar_instance}/{tenant_name}/settings/integration/search'
payload = {}
headers = {
  'Content-Type': 'application/json',
  'Authorization': 'mykey'
payload = {"query":"Migdalei"}
# Make the API request
response = requests.post(url, headers=headers, data=json.dumps(payload),verify=False)
for i in instances:
if i['name'] == "My Desire Instance":
#i['version'] = i['version'] + 1
i['enabled'] = 'true'
url = f'{xsoar_instance}/{tenant_name}/settings/integration'
for i in newpayloads:
response = requests.put(url, headers=headers, data=json.dumps(i),verify=False)
print (response.text)






L4 Transporter

Hi @BHalifa, XSOAR maintains version control internally. You need to bump the version number up in order to commit the changes. The also help since content can be changed from multiple sources.

Hi @jfernandes1 , thanks for the response.

I Understand what you say, but when I tried to change the version it's doesn't work.

Without changing it's work great.

  • 4 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!