Set a detection alert status

POST /api/detection_engine/signals/status

Set the status of one or more detection alerts.

application/json; Elastic-Api-Version=2023-10-31

Body object Required

An object containing desired status and explicit alert ids or a query to select alerts

One of:

Responses

POST /api/detection_engine/signals/status
curl \
 -X POST https://localhost:5601/api/detection_engine/signals/status \
 -H "Content-Type: application/json; Elastic-Api-Version=2023-10-31"
{
  "signal_ids": [
    "string"
  ],
  "status": "open"
}
{
  "conflicts": "abort",
  "query": {},
  "status": "open"
}
Response examples (200)
{}
Response examples (400)
{
  "error": "string",
  "message": "string",
  "statusCode": 42
}
{
  "message": "string",
  "status_code": 42
}
Response examples (401)
{
  "error": "string",
  "message": "string",
  "statusCode": 42
}
Response examples (500)
{
  "message": "string",
  "status_code": 42
}