Sign in
Security Endpoint Management API

Release an isolated endpoint

Spaces method and path for this operation:

<div><span class="operation-verb post">post</span>&nbsp;<span class="operation-path">/s/{space_id}/api/endpoint/action/unisolate</span></div>

Refer to Spaces for more information.

Release an isolated endpoint, allowing it to rejoin a network.

post/api/endpoint/action/unisolate

Request body

agent_type'endpoint' | 'sentinel_one' | 'crowdstrike' | 'microsoft_defender_endpoint'

List of agent types to retrieve. Defaults to endpoint.

alert_idsstring[]

If this action is associated with any alerts, they can be specified here. The action will be logged in any cases associated with the specified alerts. Max of 50.

case_idsstring[]

The IDs of cases where the action taken will be logged. Max of 50.

commentstring

Optional comment

endpoint_idsstring[] required

List of endpoint IDs (cannot contain empty strings). Max of 250.

parametersSecurityEndpointManagementAPIParameters

Parameters object

Example request

{
  "agent_type": "endpoint",
  "alert_ids": [
    "alert-id-1",
    "alert-id-2"
  ],
  "case_ids": [
    "case-id-1",
    "case-id-2"
  ],
  "comment": "This is a comment",
  "endpoint_ids": [
    "endpoint-id-1",
    "endpoint-id-2"
  ]
}

Response

Indicates a successful call.

actionstring

The action ID (legacy field, same as data.id).

Example response

{
  "data": {
    "agentType": "endpoint"
  }
}

Changes

Changed in 1 of the 92 revisions of this API.4

  • 804740fca5604See the full diff
    • ●

      the alert_ids/items/ request property's maxLength was set to 256

      request-property-max-length-set

    • ●

      the case_ids/items/ request property's maxLength was set to 256

      request-property-max-length-set

    • ●

      the comment request property's maxLength was set to 30000

      request-property-max-length-set

    • ●

      the endpoint_ids/items/ request property's maxLength was set to 256

      request-property-max-length-set