Configure the Risk Engine Saved Object

PATCH /api/risk_score/engine/saved_object/configure
Api key auth Basic auth

Spaces method and path for this operation:

patch /s/{space_id}/api/risk_score/engine/saved_object/configure

Refer to Spaces for more information.

Configuring the Risk Engine Saved Object

application/json

Body Required

  • exclude_alert_statuses array[string]
  • exclude_alert_tags array[string]
  • range object
    Hide range attributes Show range attributes object
    • end string
    • start string

Responses

  • 200 application/json

    Successful response

    Hide response attribute Show response attribute object
    • risk_engine_saved_object_configured boolean
  • 400 application/json

    Task manager is unavailable

    Hide response attributes Show response attributes object
    • message string Required
    • status_code integer Required

      Minimum value is 400.
  • default application/json

    Unexpected error

    Hide response attributes Show response attributes object
    • errors array[object] Required
      Hide errors attributes Show errors attributes object
      • error string Required
      • seq integer Required
    • risk_engine_saved_object_configured boolean Required
PATCH /api/risk_score/engine/saved_object/configure 
curl \
 --request PATCH 'https://localhost:5601/api/risk_score/engine/saved_object/configure' \
 --header "Authorization: $API_KEY" \
 --header "Content-Type: application/json" \
 --data '{"exclude_alert_statuses":["string"],"exclude_alert_tags":["string"],"range":{"end":"string","start":"string"}}'