How to close a case via API

[mthlvt]

It may be obvious, but how do I close an existing case via thehive4py (v 1.4.2) please? I tried to update a case with the following fields without success:

api = TheHiveApi(....)

hiveCase = api.case(caseId)

hiveCase.status='Resolved'
hiveCase.resolutionStatus='TruePositive'
hiveCase.impactStatus='NoImpact'
hiveCase.summary='closed by api'
hiveCase.tags=['test']

hiveResponse = api.update_case(hiveCase)

if hiveResponse.status_code == 200:
    logging.warning(json.dumps(hiveResponse.json(), indent=4, sort_keys=True))
else:
    logging.warning('ko: {}/{}'.format(hiveResponse.status_code, hiveResponse.text))

Thanks in advance

[nadouani]

Fixed by #57

you can specify the fields you can to update like below:

api.update_case(case, ['status', 'resolutionStatus', 'impactStatus', 'tags', 'summary'])

[mthlvt]

Edit: that works, thanks a lot for the quick fix 👍

attaching example code

hiveCase = api.case(caseId)
hiveCase.status='Resolved'
hiveCase.resolutionStatus='TruePositive'
hiveCase.impactStatus='NoImpact'
hiveCase.tags=['mytag']
hiveCase.summary='my summary'

hiveResponse = api.update_case(hiveCase,['status', 'resolutionStatus', 'impactStatus', 'tags', 'summary'])

if hiveResponse.status_code == 200:
    logging.info(json.dumps(hiveResponse.json(), indent=4, sort_keys=True))
else:
    logging.warning('ko: {}/{}'.format(hiveResponse.status_code, hiveResponse.text))```