Assign and unassign users from detection alerts
Assign users to detection alerts, and unassign them from alerts.
You cannot add and remove the same assignee in the same request.
POST /api/detection_engine/signals/assignees
curl \
-X POST http://localhost:5601/api/detection_engine/signals/assignees \
-H "Content-Type: application/json; Elastic-Api-Version=2023-10-31"
Request examples
{
"assignees": {
"add": [
"string"
],
"remove": [
"string"
]
},
"ids": [
"string"
]
}