ReportRules
Create Report Rule
Create a report rule in your FortiCNAPP instance by invoking the following endpoint:
POST https://YourAccount.lacework.net/api/v2/ReportRules
Get the unique identifiers for the alert channels (intGuidList) array by invoking the GET /api/v2/ReportRules endpoint.
In addition, the severity field is required if you create report rules for any of the following report types: awsCloudtrailEvents, awsComplianceEvents, azureActivityLogEvents, azureComplianceEvents, gcpAuditTrailEvents, gcpComplianceEvents, platformEvents, agentEvents.
post/api/v2/ReportRules
Headers
Authorizationstring required
Bearer Access Token. For example, "Bearer {YourAPIToken}"
Content-Typestring required
application/json
Request body
Example request
{
"filters": {
"enabled": 1
}
}Response
No Error
Example response
{
"data": {
"filters": {
"enabled": 1
}
}
}