ReportRules
Update Report Rules
Update a report rule by specifying parameters in the request body when invoking the following endpoint:
PATCH https://YourAccount.lacework.net/api/v2/ReportRules/{mcGuid}
Replace {mcGuid} with the mcGuid value returned for a report rule in the response, when the GET /api/v2/ReportRules endpoint is invoked.
In addition, if the severity field doesn't exist for the report rule being updated, the severity field is required if you add any of the following report types: awsCloudtrailEvents, awsComplianceEvents, azureActivityLogEvents, azureComplianceEvents, gcpAuditTrailEvents, gcpComplianceEvents, platformEvents, agentEvents.
patch/api/v2/ReportRules/{mcGuid}
Path parameters
mcGuidstring required
Report Rule ID
Headers
Authorizationstring required
Bearer Access Token. For example, "Bearer {YourAPIToken}"
Content-Typestring required
application/json
Request body
Example request
{
"filters": {
"enabled": 1
}
}Response
No Error
Example response
{
"data": {
"filters": {
"enabled": 1
}
}
}