---
title: "Convert a job result to a signal"
method: POST
path: "/api/v2/siem-historical-detections/jobs/signal_convert"
tags: ["Security Monitoring"]
---

# Convert a job result to a signal

`POST /api/v2/siem-historical-detections/jobs/signal_convert`

## Request

- Base URL: `https://api.datadoghq.com`
- URL: `https://api.datadoghq.com/api/v2/siem-historical-detections/jobs/signal_convert`
- Auth: API key in header `DD-API-KEY` and API key in header `DD-APPLICATION-KEY`

Convert a job result to a signal.

## Request body

- ConvertJobResultsToSignalsRequest: Request for converting historical job results to signals.
  - `data` ConvertJobResultsToSignalsData: Data for converting historical job results to signals.
    - `attributes` ConvertJobResultsToSignalsAttributes: Attributes for converting historical job results to signals.
      - `jobResultIds` string[], required: Job result IDs.
      - `notifications` string[], required: Notifications sent.
      - `signalMessage` string, required: Message of generated signals.
      - `signalSeverity` 'info' | 'low' | 'medium' | 'high' | 'critical', required: Severity of the Security Signal.
    - `type` 'historicalDetectionsJobResultSignalConversion': Type of payload.

## Response `204`

OK

## Other responses

- `400`: Bad Request
- `401`: Concurrent Modification
- `403`: Not Authorized
- `404`: Not Found
- `429`: Too many requests

---

[API](https://skmtc.dev/datadog/apis/api-v2.md) - [All operations](https://skmtc.dev/datadog/apis/api-v2/llms.txt) - [OpenAPI document](https://skmtc.dev/datadog/apis/api-v2/revisions/da68bf029e4c?raw)