v1

latestOpenAPI 3.0.02026-07-142351,1971.3 MB

Security Monitoring

Add a security signal to an incident

Add a security signal to an incident. This makes it possible to search for signals by incident within the signal explorer and to view the signals on the incident timeline.

patch/api/v1/security_analytics/signals/{signal_id}/add_to_incident

Path parameters

signal_idstring required

The ID of the signal.

Request body

add_to_signal_timelineboolean

Whether to post the signal on the incident timeline.

incident_idinteger required

Public ID attribute of the incident to which the signal will be added.

versioninteger

Version of the updated signal. If server side version is higher, update will be rejected.

Example request

{
  "incident_id": 2066
}

Response

statusstring

Status of the response.