Set a detection alert status | Kibana Serverless API

Set a detection alert status Beta

POST /api/detection_engine/signals/status

Set the status of one or more detection alerts.

application/json; Elastic-Api-Version=2023-10-31

An object containing desired status and explicit alert ids or a query to select alerts

conflicts string

Values are abort or proceed. Default value is abort.
query object Required

Additional properties are allowed.
status string Required

Values are open, closed, acknowledged, or in-progress.

POST /api/detection_engine/signals/status

curl \
 -X POST https://<KIBANA_URL>/api/detection_engine/signals/status \
 -H "Content-Type: application/json; Elastic-Api-Version=2023-10-31"

Request examples

{
  "signal_ids": [
    "string"
  ],
  "status": "open"
}

{
  "conflicts": "abort",
  "query": {},
  "status": "open"
}

Response examples (200)

{}

Response examples (400)

{
  "error": "string",
  "message": "string",
  "statusCode": 42
}

{
  "message": "string",
  "status_code": 42
}

Response examples (401)

{
  "error": "string",
  "message": "string",
  "statusCode": 42
}

Response examples (500)

{
  "message": "string",
  "status_code": 42
}