Add Tag to Indicator¶

POST /1.3/indicators/tags

Description¶

Creates a tag on an indicator, for the given enclave. If the tag already exists, it will be reused.

Note

The maximum length of a tag is 90 characters.

Note

Tags should only contain certain characters. See main Tag page for details.

Parameters¶

The request must specify the indicator value to associate the tag with and the name and enclaveId of the indicator tag. The tag will be assigned, or created and assigned if it does not already exist.

The request takes no URL parameters. The request body should be a JSON with the following fields:

Parameter	Required	Default	Description
value	X	`www.example.com`	Indicator value to tag.
tag	X		The tag object to create (see below).

The tag object should contain the following fields:

Parameter	Required	Default	Description
name	X	`malicious`	The name of the tag. Use only allowed characters.
enclaveId	X	`218019c2-a914-4961-8f59-b05abd5e753c`	The id of the enclave to create the tag in.

Response (200)¶

The Tag after operation success.

Example Usage¶

Request¶

{
    "value": "1.2.3.4",
    "tag": {
        "name": "new-tag",
        "enclaveId": "1fd0dbf4-316c-4ae5-9e93-2d8a32f30f86"
    }
}

Response¶

{
    "guid": "9b07f7fb-76d0-4f54-b1ea-11c38036cf81",
    "name": "new-tag",
    "enclaveId": "1fd0dbf4-316c-4ae5-9e93-2d8a32f30f86"
}