v1

latestOpenAPI 3.0.02026-07-141,4077,1665.2 MB
Security Monitoring

Validate a suppression rule

Validate a suppression rule.

post/api/v2/security_monitoring/configuration/suppressions/validation

Request body

Example request

{
  "data": {
    "attributes": {
      "data_exclusion_query": "source:cloudtrail account_id:12345",
      "description": "This rule suppresses low-severity signals in staging environments.",
      "enabled": true,
      "expiration_date": 1703187336000,
      "name": "Custom suppression",
      "rule_query": "type:log_detection source:cloudtrail",
      "start_date": 1703187336000,
      "suppression_query": "env:staging status:low",
      "tags": [
        "technique:T1110-brute-force",
        "source:cloudtrail"
      ]
    },
    "type": "suppressions"
  }
}

Response

OK