---
title: "Unsnooze an action policy"
method: POST
path: "/api/alerting/v2/action_policies/{id}/_unsnooze"
tags: ["alerting-v2"]
---

# Unsnooze an action policy

`POST /api/alerting/v2/action_policies/{id}/_unsnooze`

## Request

- Base URL: `https://localhost:5601`
- URL: `https://localhost:5601/api/alerting/v2/action_policies/{id}/_unsnooze`
- Auth: one of:
  - API key in header `Authorization`
  - HTTP basic

**Spaces method and path for this operation:**

<div><span class="operation-verb post">post</span>&nbsp;<span class="operation-path">/s/{space_id}/api/alerting/v2/action_policies/{id}/_unsnooze</span></div>

Refer to [Spaces](https://www.elastic.co/docs/deploy-manage/manage-spaces) for more information.

Remove the snooze from an action policy.<br/><br/>[Required authorization] Route required privileges: manage_alerting-v2-action-policies.

## Path parameters

- `id` string, required

## Headers

- `kbn-xsrf` string, required

## Response `200`

Returns the unsnoozed action policy.

- KibanaHTTPAPIsAlertingActionPolicyResponse
  - `created_at` string, date-time, required: The ISO datetime when the action policy was created.
  - `created_by` KibanaHTTPAPIsAlertingActor, required: Identity that performed the write.
    - `profile_uid` string, nullable, required: User profile ID of the actor, or `null` when it cannot be resolved.
  - `description` string: A description of the action policy. Omitted when the policy has none.
  - `destinations` KibanaHTTPAPIsAlertingActionPolicyDestination[], required: The list of destinations.
    - `id` string, required: The workflow identifier.
    - `type` 'workflow', required: The destination type.
  - `enabled` boolean, required: Whether the action policy is enabled.
  - `grouping` union
    - KibanaHTTPAPIsAlertingActionPolicyGroupingPerAlert: one notification per alert lifecycle (default).
      - `mode` 'per_alert', required
    - KibanaHTTPAPIsAlertingActionPolicyGroupingAll: a single notification for all matching alerts.
      - `mode` 'all', required
    - KibanaHTTPAPIsAlertingActionPolicyGroupingPerField: group by the specified `fields`.
      - `fields` string[], required: The fields alerts are grouped by. At least one is required, and no other mode accepts them.
      - `mode` 'per_field', required
  - `id` string, required: The unique identifier for the action policy.
  - `matcher` object: Selects the alerts this policy applies to. Set `tags` to match alerts from rules with those routing tags. Set `expression` to a KQL query, which will be evaluated against each alert. <br/><br/> If you set both `tags` and `expression`, an alert must match the tags and the expression for the policy to apply. At least one of `tags` and `expression` must be set, so an empty `matcher` is rejected. Omit `matcher` entirely for a catch-all policy that applies to all alerts.
    - `expression` string: A KQL query that's evaluated against each alert. Supported fields are: `alert_id`, `alert_status`, `group_hash`, `last_event_timestamp`, `severity`, and your rule's query output columns under `data.*` (for example, `data.host.name`). Referencing other fields won't work. Omit `matcher.expression` to match on `tags` alone.
    - `tags` string[]: Routing tags this policy should match. The policy applies to alerts from any rule whose `metadata.routing_tags` include at least one of these tags. An empty array is not accepted. Omit `matcher.tags` to match on `matcher.expression` alone.
  - `name` string, required: The name of the action policy.
  - `snoozed_until` string: The ISO datetime until which the policy is snoozed. Omitted when the policy is not snoozed.
  - `throttle` union
    - KibanaHTTPAPIsAlertingActionPolicyThrottleOnStatusChange: notify only on alert status transitions (default for `per_alert`).
      - `strategy` 'on_status_change', required
    - KibanaHTTPAPIsAlertingActionPolicyThrottlePerStatusInterval: notify on transitions and at regular intervals.
      - `interval` string, required: The throttle interval duration (e.g. 5m, 1h) that sets the notification cadence.
      - `strategy` 'per_status_interval', required
    - KibanaHTTPAPIsAlertingActionPolicyThrottleTimeInterval: notify at regular intervals regardless of status (default for `all`/`per_field`).
      - `interval` string, required: The throttle interval duration (e.g. 5m, 1h) that sets the notification cadence.
      - `strategy` 'time_interval', required
    - KibanaHTTPAPIsAlertingActionPolicyThrottleEveryTime: notify on every evaluation cycle (high volume).
      - `strategy` 'every_time', required
  - `updated_at` string, date-time, required: The ISO datetime when the action policy was last updated.
  - `updated_by` KibanaHTTPAPIsAlertingActor, required: Identity that performed the write.
    - `profile_uid` string, nullable, required: User profile ID of the actor, or `null` when it cannot be resolved.

## Other responses

- `400`: Indicates an invalid schema or parameters.
- `401`: Indicates the request was not authenticated.
- `403`: Indicates the user does not have the required privileges to perform the request.
- `404`: Indicates an action policy with the given ID does not exist.
- `409`: Indicates the action policy was concurrently updated by another caller.
- `500`: Indicates an unexpected server-side error.
- `503`: Indicates the alerting engine is disabled by the `alerting:v2:enabled` advanced setting.

## Changes

> 266 revisions in range; 110 not diffed.

- **2026-09-16** `1078d5597eb4`: 1 breaking
  - removed the required property `tags` from the response with the `200` status
- **2026-09-11** `cf530633f03b`: 1 breaking, 2 info
  - the `matcher` response's property type changed from `string` to `object` for status `200`
  - added the optional property `matcher/expression` to the response with the `200` status
  - added the optional property `matcher/tags` to the response with the `200` status
- **2026-08-17** `e9badbb5da99`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/elastic/apis/kibana-apis/changes/api/alerting/v2/action_policies/:id/_unsnooze/post.md)

---

[API](https://skmtc.dev/elastic/apis/kibana-apis.md) - [All operations](https://skmtc.dev/elastic/apis/kibana-apis/llms.txt) - [OpenAPI document](https://skmtc.dev/elastic/apis/kibana-apis/revisions/b87131d80c52?raw)