Change the triage state of a security signal
PATCH {{baseUrl}}/api/v2/security_monitoring/signals/:signal_id/state
Change the triage state of a security signal.
Request Body
{"data"=>{"attributes"=>{"state"=>"open", "archive_comment"=>"<string>", "archive_reason"=>"other", "version"=>"<long>"}, "id"=>{"description"=>"The unique ID of the security signal."}, "type"=>"signal_metadata"}}
HEADERS
Key | Datatype | Required | Description |
---|---|---|---|
Content-Type | string | ||
Accept | string |
RESPONSES
status: OK
{"data":{"attributes":{"assignee":{"uuid":"\u003cstring\u003e","handle":"\u003cstring\u003e","icon":"\u003cstring\u003e","id":"\u003clong\u003e","name":"\u003cstring\u003e"},"state":"archived","incident_ids":["\u003clong\u003e","\u003clong\u003e"],"archive_comment":"\u003cstring\u003e","archive_comment_timestamp":"\u003clong\u003e","archive_comment_user":{"uuid":"\u003cstring\u003e","handle":"\u003cstring\u003e","icon":"\u003cstring\u003e","id":"\u003clong\u003e","name":"\u003cstring\u003e"},"archive_reason":"testing_or_maintenance","state_update_timestamp":"\u003clong\u003e","state_update_user":{"uuid":"\u003cstring\u003e","handle":"\u003cstring\u003e","icon":"\u003cstring\u003e","id":"\u003clong\u003e","name":"\u003cstring\u003e"}},"id":"\u003cstring\u003e","type":"signal_metadata"}}