[Bug] WebHook creation does not work

[crackytsi]

Bug / Feature Request

Work Environment

Question	Answer
OS version (server)	Debian
OS version (client)	10
TheHive version / git hash	4 RC2
Package Type	DEB

Problem Description

I tried to create a webhook.
Basically there is a little mistake in the documentation about the curl command, see my PR here:
TheHive-Project/TheHiveDocs#167

But never the less, after creation it just returns:
{"path":"notification","defaultValue":[],"value":null}

Which sounds wrong to my eyes.
After trying to perform a get command to /api/config/organisation/notification it is also returning this result.
The WebHook does not work.
Can you take a look into that and give me a little hint?

[To-om]

The documentation was wrong. The correct body is:

{
  "value": [
    {
      "delegate": false,
      "trigger": { "name": "AnyEvent"},
      "notifier": { "name": "webhook", "endpoint": "local" }
    }
  ]
}

@crackytsi I let you tell me if webhooks work for you before I close this issue.

[aacgood]

Not @crackytsi here but can confirm the updated POST body works now. Also, looks like the setting is set per organisiation and not globally.

…

On Sat, May 16, 2020 at 7:29 PM To-om ***@***.***> wrote: The documentation was wrong. The correct body is: { "value": [ { "delegate": false, "trigger": { "name": "AnyEvent"}, "notifier": { "name": "webhook", "endpoint": "local" } } ] } @crackytsi <https://github.com/crackytsi> I let you tell me if webhooks work for you before I close this issue. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#1318 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AGWR3JBGLNEZGUWGZWV6AUTRRZMIVANCNFSM4M6RWBHQ> .

[crackytsi]

@To-om : Thank you very much, it works.
Can you please also share a curl that removes this configuration?

I also noted that compared to the old-webhook all nested objects are added (e.g. update of log --> contains data of case-task and case). Meanwhile in some situtations that might be helpfull in others this generates bigger responses and slows down the speed. Is this configurable to have the output same as in the 2.x and 3.x releases?

[To-om]

Now version 0 doesn't include parent object and version 1 does. This let you choose.

[To-om]

@crackytsi if you want to remove webhook, set an empty list:

curl -XPUT \
  -u$thehive_user:$thehive_password \
  -H 'Content-type: application/json' \
  $thehive_url/api/config/organisation/notification -d '
    {
      "value": []
    }
  '

[crackytsi]

Thank you very much :)