DAdatadog
Security Monitoring

Change the triage state of a security signal

This endpoint is deprecated - Change the triage state of a security signal.

patch/api/v1/security_analytics/signals/{signal_id}/state

Request

  • Base URL
    https://api.datadoghq.com
  • URL
    https://api.datadoghq.com/api/v1/security_analytics/signals/{signal_id}/state
  • Auth
    API key in header DD-API-KEY and API key in header DD-APPLICATION-KEY

Path parameters

signal_idstring required

The ID of the signal.

Request body

archiveCommentstring

Optional comment to explain why a signal is being archived.

archiveReason'none' | 'false_positive' | 'testing_or_maintenance' | 'investigated_case_opened' | 'true_positive_benign' | 'true_positive_malicious' | 'other'

Reason why a signal has been archived.

state'open' | 'archived' | 'under_review' required

The new triage state of the signal.

versioninteger

Version of the updated signal. If server side version is higher, update will be rejected.

Example request

{
  "state": "open"
}

Response

OK

statusstring

Status of the response.

Changes

No recorded changes to this operation across all 1 revision of this API.