Fetching Incidents Using Commvault REST APIs

You can fetch an incident using Commvault REST APIs.

Procedure

1. Generate and save the access token. For more information, see Creating an Access Token.

2. To add and update an asset, see "Add and configure apps and assets to provide actions in Splunk SOAR (Cloud)" in the Splunk SOAR (Cloud) documentation.

   1. Create a Commvault Cloud asset.

   2. Under Asset Setting, do the following:

      1. Specify the Commvault End Point.

      2. Specify the Commvault Access Token.

      3. Specify the Phantom API Token. For information about creating a token, see "Provisioning an authorization token" in the Splunk SOAR (Cloud) documentation.

3. Configure a polling interval for the asset to ingest data. For more information, see "Configure ingest settings for a Splunk SOAR (Cloud) asset" in the Splunk SOAR (Cloud) documentation.

   1. Select Interval to configure the number of minutes between polls.

   2. Select Scheduled to view additional options and intervals.

4. Click Save.