Security Monitoring

Create a severity modifier rule

Create a severity modifier rule for the current organization.

post/api/v2/security/findings/automation/severity_modifier_rules

Request

Base URL
https://api.datadoghq.com
Auth
- API key in header DD-API-KEY and API key in header DD-APPLICATION-KEY
- or OAuth 2
  Authorization code/oauth2/v1/authorize
  Token URL/oauth2/v1/token
TypeScript
https://skmtc.dev/datadog/apis/datadog-api-v2-collection/docs/api/v2/security/findings/automation/severity_modifier_rules/post.ts
A function with typed inputs. Its response is checked against the schema.

Request body

Example request

{
  "data": {
    "attributes": {
      "action": {
        "description": "Lower severity for dev environment noise",
        "severity": "low",
        "type": "set"
      },
      "enabled": true,
      "name": "Downgrade misconfigurations in dev",
      "rule": {
        "finding_types": [
          "misconfiguration"
        ],
        "query": "env:prod team:platform"
      }
    },
    "type": "severity_modifier_rules"
  }
}

Response

Successfully created the severity modifier rule

Example response

{
  "data": {
    "attributes": {
      "action": {
        "description": "Lower severity for dev environment noise",
        "severity": "low",
        "type": "set"
      },
      "created_at": 1722439510282,
      "created_by": {
        "id": "00000000-0000-0000-0000-000000000000",
        "name": "Jane Doe",
        "type": "user"
      },
      "enabled": true,
      "modified_at": 1722439510282,
      "modified_by": {
        "id": "00000000-0000-0000-0000-000000000000",
        "name": "Jane Doe",
        "type": "user"
      },
      "name": "Downgrade misconfigurations in dev",
      "rule": {
        "finding_types": [
          "misconfiguration"
        ],
        "query": "env:prod team:platform"
      }
    },
    "id": "00000000-0000-0000-0000-000000000000",
    "type": "severity_modifier_rules"
  }
}

Changes

Changes to this operation have not been checked yet.