v1

latestOpenAPI 3.0.02026-07-141,4077,1665.2 MB
Security Monitoring

Patch a signal-based notification rule

Partially update the notification rule. All fields are optional; if a field is not provided, it is not updated.

patch/api/v2/security/signals/notification_rules/{id}

Path parameters

idstring required

ID of the notification rule.

Request body

Example request

{
  "data": {
    "attributes": {
      "enabled": true,
      "name": "Rule 1",
      "routing": {
        "mode": "manual"
      },
      "selectors": {
        "query": "(source:production_service OR env:prod)",
        "rule_types": [
          "misconfiguration",
          "attack_path"
        ],
        "severities": [
          "critical"
        ],
        "trigger_source": "security_findings"
      },
      "targets": [
        "@john.doe@email.com"
      ],
      "time_aggregation": 86400,
      "version": 1
    },
    "id": "aaa-bbb-ccc",
    "type": "notification_rules"
  }
}

Response

Notification rule successfully patched.

Example response

{
  "data": {
    "attributes": {
      "created_at": 1722439510282,
      "created_by": {
        "handle": "john.doe@domain.com",
        "name": "John Doe"
      },
      "enabled": true,
      "modified_at": 1722439510282,
      "modified_by": {
        "handle": "john.doe@domain.com",
        "name": "John Doe"
      },
      "name": "Rule 1",
      "selectors": {
        "query": "(source:production_service OR env:prod)",
        "rule_types": [
          "misconfiguration",
          "attack_path"
        ],
        "severities": [
          "critical"
        ],
        "trigger_source": "security_findings"
      },
      "targets": [
        "@john.doe@email.com"
      ],
      "time_aggregation": 86400,
      "version": 1
    },
    "id": "aaa-bbb-ccc",
    "type": "notification_rules"
  }
}