Configure the Risk Engine Saved Object

PATCH /api/risk_score/engine/saved_object/configure

Api key auth Basic auth

Spaces method and path for this operation:

patch /s/{space_id}/api/risk_score/engine/saved_object/configure

Refer to Spaces for more information.

Configuring the Risk Engine Saved Object

application/json

Body Required

exclude_alert_statuses array[string]
exclude_alert_tags array[string]
range object
Hide range attributes Show range attributes object
- end string
- start string

Responses

200 application/json

Successful response
Hide response attribute Show response attribute object
- risk_engine_saved_object_configured boolean
400 application/json

Task manager is unavailable
Hide response attributes Show response attributes object
- message string Required
- status_code integer Required
  
  Minimum value is 400.
default application/json

Unexpected error
Hide response attributes Show response attributes object
- errors array[object] Required
  
  Hide errors attributes Show errors attributes object
  
  error string Required
  
  seq integer Required
- risk_engine_saved_object_configured boolean Required

PATCH /api/risk_score/engine/saved_object/configure

curl \
 --request PATCH 'https://localhost:5601/api/risk_score/engine/saved_object/configure' \
 --header "Authorization: $API_KEY" \
 --header "Content-Type: application/json" \
 --data '{
  "exclude_alert_statuses": [
    "string"
  ],
  "exclude_alert_tags": [
    "string"
  ],
  "range": {
    "end": "string",
    "start": "string"
  }
}'