v1

latestOpenAPI 3.0.02026-07-142351,1971.3 MB
Security Monitoring

Change the triage state of a security signal

This endpoint is deprecated - Change the triage state of a security signal.

patch/api/v1/security_analytics/signals/{signal_id}/state

Path parameters

signal_idstring required

The ID of the signal.

Request body

archiveCommentstring

Optional comment to explain why a signal is being archived.

archiveReason'none' | 'false_positive' | 'testing_or_maintenance' | 'investigated_case_opened' | 'true_positive_benign' | 'true_positive_malicious' | 'other'

Reason why a signal has been archived.

state'open' | 'archived' | 'under_review' required

The new triage state of the signal.

versioninteger

Version of the updated signal. If server side version is higher, update will be rejected.

Example request

{
  "state": "open"
}

Response

OK

statusstring

Status of the response.