Sign in
ReportRules

Update Report Rules

Update a report rule by specifying parameters in the request body when invoking the following endpoint:

PATCH https://YourAccount.lacework.net/api/v2/ReportRules/{mcGuid}

Replace {mcGuid} with the mcGuid value returned for a report rule in the response, when the GET /api/v2/ReportRules endpoint is invoked.

In addition, if the severity field doesn't exist for the report rule being updated, the severity field is required if you add any of the following report types: awsCloudtrailEvents, awsComplianceEvents, azureActivityLogEvents, azureComplianceEvents, gcpAuditTrailEvents, gcpComplianceEvents, platformEvents, agentEvents.

patch/api/v2/ReportRules/{mcGuid}

Path parameters

mcGuidstring required

Report Rule ID

Headers

Authorizationstring required

Bearer Access Token. For example, "Bearer {YourAPIToken}"

Content-Typestring required

application/json

Request body

intgGuidListstring[]

The alert channels for the rule to access.

Example request

{
  "filters": {
    "enabled": 1
  }
}

Response

No Error

Example response

{
  "data": {
    "filters": {
      "enabled": 1
    }
  }
}

Changes

No recorded changes to this endpoint across all 1 revision of this API.