Configure the Risk Engine Saved Object

PATCH /api/risk_score/engine/saved_object/configure

Api key auth Basic auth

Configuring the Risk Engine Saved Object

application/json

Body Required

exclude_alert_statuses array[string]
exclude_alert_tags array[string]
range object
Hide range attributes Show range attributes object
- end string
- start string

Responses

200 application/json

Successful response
Hide response attribute Show response attribute object
- risk_engine_saved_object_configured boolean
400 application/json

Task manager is unavailable
Hide response attributes Show response attributes object
- message string Required
- status_code integer Required
  
  Minimum value is 400.
default application/json

Unexpected error
Hide response attributes Show response attributes object
- errors array[object] Required
  
  Hide errors attributes Show errors attributes object
  
  error string Required
  
  seq integer Required
- risk_engine_saved_object_configured boolean Required

PATCH /api/risk_score/engine/saved_object/configure

curl \
 --request PATCH 'https://localhost:5601/api/risk_score/engine/saved_object/configure' \
 --header "Authorization: $API_KEY" \
 --header "Content-Type: application/json" \
 --data '{"exclude_alert_statuses":["string"],"exclude_alert_tags":["string"],"range":{"end":"string","start":"string"}}'