COcotool
Alerts

Update alert status

Changed on

Update an alert lifecycle status and append a status-change timeline entry when the status changes. Optional feedback is appended as a comment in the same transaction. Duplicate status requires a canonical alert target.

post/api/alerts/{alertId}/status

Request

  • Base URL
    https://app.cotool.ai
  • Auth
    HTTP bearer

Path parameters

alertIdstring required

Alert UUID or human-readable display ID

Request body

status'open' | 'in_progress' | 'escalated' | 'closed_true_positive' | 'closed_false_positive' | 'closed_true_positive_benign' | 'dismissed' | 'duplicate' required

New alert lifecycle status. expired is set only by the alert inactivity job and is rejected here.

reasonstring

Optional reason for the status change

commentBodyMarkdownstring

Optional human feedback appended to the alert timeline as a comment

duplicateOfAlertIdstring

Required canonical alert identifier when marking an alert as duplicate. A target that is itself a duplicate resolves to its canonical alert, and any duplicates of the alert being marked move to that canonical alert.

confirmedAlternativeExplanationIdstring uuid

Alternative explanation from the latest escalation that this close confirms. Only valid with closed_false_positive or closed_true_positive_benign; the explanation is recorded on the status change and, when no reason is given, becomes the reason.

Response

Successful response

commentAddedboolean

Whether optional feedback was appended as a comment with the status transition

statusChangedboolean required

Whether the alert status changed and a timeline entry was recorded

Changes

  • f5abe0add203Revision changes
    • info

      the ////// response's property pattern was changed from ^[UW][A-Z0-9]+$ to ^[UWB][A-Z0-9]+$ for the status

    • info

      the ////// response's property pattern was changed from ^[UW][A-Z0-9]+$ to ^[UWB][A-Z0-9]+$ for the status