OpenCTI icon

OpenCTI

Interact with the OpenCTI Cyber Threat Intelligence platform

Actions149

Observed Data → Update

AI-generated

Summary

Update an Observed Data record with selected fields.

Inputs

  • observedDataId (required) — The ID of the Observed Data to update.
  • updateFields — Fields to update; supports first_observed, last_observed, and number_observed.

Output shape

a single updated Observed Data object

Returns the updated record, including any modified fields such as first_observed, last_observed, and number_observed. Errors are handled via n8n's standard error mechanism and are not embedded in the response body.

Examples

Example 1: Update the last observed timestamp of an Observed Data entry

Set observedDataId to 'abc-123' and provide updateFields with last_observed set to '2024-09-01T12:00:00Z'

Links

Discussion