---
title: "Update a rule template"
method: PATCH
path: "/api/rule_templates/{id}/update/"
tags: ["Rule templates"]
---

# Update a rule template

`PATCH /api/rule_templates/{id}/update/`

## Request

- Base URL: `https://eyalsec.com`
- URL: `https://eyalsec.com/api/rule_templates/{id}/update/`
- Auth: one of:
  - API key in header `X-API-Key`
  - API key in cookie `__Host-es2session`

Renames a personal template and REPLACES its item list with the one supplied. 404 if the template is not owned by the caller, which includes every EyalSec template (those are writable only by an administrator). Replies 204 No Content. Cookie callers must pass CSRF.

This is a **write**: a read-only API key is refused with 403.

## Path parameters

- `id` integer, required

## Request body

- object
  - `name` string, required: Template name.
  - `description` string: Free-text description.
  - `items` unknown[]: The complete new item list (replaces the old one). Omitted or empty leaves the template with no rules.
    - unknown

## Response `204`

Done. No body.

## Other responses

- `401`: The API key is missing, wrong, revoked or expired.
- `429`: A rate limit was hit, or the account is locked after wrong passwords. Retry-After gives the seconds to wait.
- `default`: An error. Check the status first; the body carries a short message, as JSON ({"error": "..."}) on most endpoints and as plain text on some. 400: malformed JSON, an invalid regex, an unreadable cursor or date, or an unknown value. 401: the API key is missing, wrong, revoked or expired. 403: a failed CSRF check, a read-only key trying to write, a product or feature not enabled on your account, a wrong password, or a write on an account limited to reading. 404: not found, including things that belong to another account. 409: conflict with the current state. 422: a field is missing or invalid. 429: a rate limit was hit, or the account is locked after wrong passwords. 500: something failed on our side.

---

[API](https://skmtc.dev/eyalsec/apis/eyalsec-api.md) · [All operations](https://skmtc.dev/eyalsec/apis/eyalsec-api/llms.txt) · [OpenAPI document](https://skmtc.dev/eyalsec/apis/eyalsec-api/revisions/dc7520689cf1?raw)