For AI agents: A markdown version of this page is available at https://dnd37xeb23o8n.cloudfront.net/stefon.simmons/docs-astro-web-10435/es/api/latest/security-monitoring/update-security-signal-triage-state-or-assignee.md. A documentation index is available at /llms.txt.
Language
Datadog site

Update security signal triage state or assignee

PATCHhttps://api.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/updatehttps://api.us3.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/updatehttps://api.us5.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/updatehttps://api.datadoghq.eu/api/v2/security_monitoring/signals/{signal_id}/updatehttps://api.ap1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/updatehttps://api.ap2.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/updatehttps://api.uk1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/updatehttps://api.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id}/updatehttps://api.us2.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id}/update

Descripción general

Update the triage state or assignee of a security signal.

This endpoint requires the security_monitoring_signals_write permission.

Argumentos

Parámetros de ruta

Nombre
Type
Descripción
signal_id [required]
string

The ID of the signal.

Solicitud

Body Data (required)

Attributes describing the signal triage state or assignee update.

Campo
Type
Descripción
data [required]
object

Data containing the triage state or assignee update for a security signal.

Respuesta

OK

The response returned after all triage operations, containing the updated signal triage data.

Campo
Type
Descripción
data [required]
object

Data containing the updated triage attributes of the signal.

Ejemplo de código

# Path parameters
export signal_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X PATCH "https://api.${DD_SITE}/api/v2/security_monitoring/signals/${signal_id}/update" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "archive_reason": "none",
      "state": "archived"
    },
    "type": "signal_metadata"
  }
}
EOF
# Path parameters
export signal_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="us3.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X PATCH "https://api.${DD_SITE}/api/v2/security_monitoring/signals/${signal_id}/update" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "archive_reason": "none",
      "state": "archived"
    },
    "type": "signal_metadata"
  }
}
EOF
# Path parameters
export signal_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="us5.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X PATCH "https://api.${DD_SITE}/api/v2/security_monitoring/signals/${signal_id}/update" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "archive_reason": "none",
      "state": "archived"
    },
    "type": "signal_metadata"
  }
}
EOF
# Path parameters
export signal_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="datadoghq.eu"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X PATCH "https://api.${DD_SITE}/api/v2/security_monitoring/signals/${signal_id}/update" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "archive_reason": "none",
      "state": "archived"
    },
    "type": "signal_metadata"
  }
}
EOF
# Path parameters
export signal_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="ap1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X PATCH "https://api.${DD_SITE}/api/v2/security_monitoring/signals/${signal_id}/update" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "archive_reason": "none",
      "state": "archived"
    },
    "type": "signal_metadata"
  }
}
EOF
# Path parameters
export signal_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="ap2.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X PATCH "https://api.${DD_SITE}/api/v2/security_monitoring/signals/${signal_id}/update" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "archive_reason": "none",
      "state": "archived"
    },
    "type": "signal_metadata"
  }
}
EOF
# Path parameters
export signal_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="uk1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X PATCH "https://api.${DD_SITE}/api/v2/security_monitoring/signals/${signal_id}/update" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "archive_reason": "none",
      "state": "archived"
    },
    "type": "signal_metadata"
  }
}
EOF
# Path parameters
export signal_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X PATCH "https://api.${DD_SITE}/api/v2/security_monitoring/signals/${signal_id}/update" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "archive_reason": "none",
      "state": "archived"
    },
    "type": "signal_metadata"
  }
}
EOF
# Path parameters
export signal_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="us2.ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X PATCH "https://api.${DD_SITE}/api/v2/security_monitoring/signals/${signal_id}/update" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
  "data": {
    "attributes": {
      "archive_reason": "none",
      "state": "archived"
    },
    "type": "signal_metadata"
  }
}
EOF