v1
latestOpenAPI 3.0.02026-07-141,4077,1665.2 MBSecurity Monitoring
Get all suppression rules
Get the list of all suppression rules.
get/api/v2/security_monitoring/configuration/suppressions
Query parameters
querystring
Query string.
sort'name' | 'start_date' | 'expiration_date' | 'update_date' | 'enabled' | '-name' | '-start_date' | '-expiration_date' | '-update_date' | '-creation_date' | '-enabled'
The sort parameters used for querying suppression rules.
Attribute used to sort the list of suppression rules. Prefix with - to sort in descending order.
page[size]integer
Example:10
Size for a given page. Use -1 to return all items.
page[number]integer
Specific page number to return.
Response
OK
Example response
{
"data": [
{
"attributes": {
"creator": {
"handle": "john.doe@datadoghq.com",
"name": "John Doe"
},
"data_exclusion_query": "source:cloudtrail account_id:12345",
"description": "This rule suppresses low-severity signals in staging environments.",
"editable": true,
"enabled": true,
"expiration_date": 1703187336000,
"name": "Custom suppression",
"rule_query": "type:log_detection source:cloudtrail",
"start_date": 1703187336000,
"suppression_query": "env:staging status:low",
"tags": [
"technique:T1110-brute-force",
"source:cloudtrail"
],
"updater": {
"handle": "john.doe@datadoghq.com",
"name": "John Doe"
},
"version": 42
},
"id": "3dd-0uc-h1s",
"type": "suppressions"
}
],
"meta": {
"page": {
"pageSize": 2,
"totalCount": 2
}
}
}