Sign in
OpenAPI 3.0.3raw.githubusercontent.com2026-08-177301,8125.6 MB

e9badbb5da99

alerting-v2

Partially update an action policy.

Spaces method and path for this operation:

<div><span class="operation-verb patch">patch</span>&nbsp;<span class="operation-path">/s/{space_id}/api/alerting/v2/action_policies/{id}</span></div>

Refer to Spaces for more information.

Apply a partial update to an existing action policy. Fields not present in the body are left unchanged.<br/><br/>[Required authorization] Route required privileges: manage_alerting-v2-action-policies.

patch/api/alerting/v2/action_policies/{id}

Path parameters

idstring required

The action policy identifier.

Headers

kbn-xsrfstring required
Example:true

A required header to protect against CSRF attacks

Request body

descriptionstring

A description of the action policy.

group_bystring[] nullable

The fields used to group alerts.

matcherstring nullable

A KQL query string to match alerts.

namestring

The name of the action policy.

tagsstring[] nullable

Tags for categorizing the action policy.

versionstring required

The current version of the action policy, used for optimistic concurrency control.

Response

Returns the updated action policy.

created_atstring required

The ISO datetime when the action policy was created.

created_bystring nullable required

The user ID who created the action policy.

descriptionstring required

A description of the action policy.

enabledboolean required

Whether the action policy is enabled.

group_bystring[] nullable required

The fields used to group alerts, or null for no grouping.

idstring required

The unique identifier for the action policy.

matcherstring nullable required

A KQL query to match alerts, or null to match all.

namestring required

The name of the action policy.

snoozed_untilstring nullable required

The ISO datetime until which the policy is snoozed, or null if not snoozed.

tagsstring[] nullable required

Tags associated with the action policy.

updated_atstring required

The ISO datetime when the action policy was last updated.

updated_bystring nullable required

The user ID who last updated the action policy.

versionstring

The version, used for optimistic concurrency control.