---
title: "Update one or several alerts"
method: POST
path: "/v2/update"
tags: ["Alert"]
---

# Update one or several alerts

`POST /v2/update`

Batch-update assignee, workflow status, and notes across one or more classic alerts in a single request.

## Request body

- object[]
  - `id` string, required — Id of the alert to update
  - `assignee` string — New assignee. Can be an id, uhash, username or email.
  - `note` string — New note text
  - `status` 'unassigned' | 'assigned' | 'pending' | 'dismiss' | 'no-action' | 'actionable' | 'tuning' — New alert status (legacy)
  - `statusInPortal` 'New' | 'Resolved' | 'Pending' | 'Dismissed' | 'Flag for Tuning' — New alert status

## Response `200`

output

- AlertUpdateResponse
  - `success` object[]
    - `id` string, required — Id of the updated alert
    - `status` 'unassigned' | 'assigned' | 'pending' | 'dismiss' | 'no-action' | 'actionable' | 'tuning' — Updated status (legacy)
    - `statusInPortal` 'New' | 'Resolved' | 'Pending' | 'Dismissed' | 'Flag for Tuning' — Updated status
    - `assignee` string — Updated assignee
    - `note` object — Updated note text
      - `text` string
      - `author` string
      - `date` string, date-time
    - `reviewDate` string, date-time — Date of when the alert was last reviewed
    - `statusDate` string, date-time — Date of when the alert last had a status update
    - `statusChangeBy` string — Id of the user that performed the status update
  - `error` object[]
    - `id` string — Id of the alert that failed to update
    - `reason` string — Error message why the alert failed to update
    - `statusCode` integer — Error status code

---

[API](https://skmtc.net/recordedfuture/apis/alert-api.md) · [All operations](https://skmtc.net/recordedfuture/apis/alert-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/recordedfuture/alert-api/revisions/c8c2f68d8b60/schema)