Override the severity of security findings
WARNINGNote: This endpoint is in preview and is subject to change.
If you have any feedback, contact Datadog support.
PATCH
https://api.datadoghq.com/api/v2/security/findings/severityhttps://api.us3.datadoghq.com/api/v2/security/findings/severityhttps://api.us5.datadoghq.com/api/v2/security/findings/severityhttps://api.datadoghq.eu/api/v2/security/findings/severityhttps://api.ap1.datadoghq.com/api/v2/security/findings/severityhttps://api.ap2.datadoghq.com/api/v2/security/findings/severityhttps://api.uk1.datadoghq.com/api/v2/security/findings/severityhttps://api.ddog-gov.com/api/v2/security/findings/severityhttps://api.us2.ddog-gov.com/api/v2/security/findings/severityPrésentation
Set or clear the manual severity override of security findings.
You can update up to 100 security findings per request.
Use the set action with a value to apply a manual severity override.
value is required for set and must be omitted for clear.
The info value sets the lowest severity the finding type allows.
Use the clear action to remove a manual severity override.
clear does not remove a severity set by an automation rule.
The optional description is accepted with both actions and has a limit of 280 characters.
Auto-closed findings are excluded.
Findings whose severity was set by an automation rule are skipped and listed in the response meta.warnings.
If every finding is skipped this way, the request fails with a 400 error.
Findings that cannot be found are skipped without a warning.
The request fails with a 404 error only if none of the findings can be found.
Requête
Body Data (required)
Champ
Type
Description
data [required]object
Data of the severity override request.
attributes [required]object
Attributes of the severity override request.
severity [required]<oneOf>
Severity override to apply to the findings.
Set action to set to apply a manual severity override with the given value.
Set action to clear to remove a manual severity override.
<action=set>object
Applies a manual severity override to the findings.
action [required]enum
The action that applies a manual severity override.
setAllowed enum values:
setdescriptionstring
Additional information about the severity change. This field has a limit of 280 characters.
value [required]enum
Severity to apply to the findings.
info sets the lowest severity the finding type allows.
Allowed enum values:
critical, high, medium, low, info<action=clear>object
Removes the manual severity override of the findings. This action does not remove a severity set by an automation rule.
action [required]enum
The action that removes a manual severity override.
clearAllowed enum values:
cleardescriptionstring
Additional information about the severity change. This field has a limit of 280 characters.
idstring
Unique identifier of the severity override request. If not provided, an identifier is generated.
relationships [required]object
Relationships of the severity override request.
findings [required]object
Security findings to override the severity of.
data[object]
Array of security finding data objects.
id [required]string
Unique identifier of the security finding.
type [required]enum
Security findings resource type.
findingsAllowed enum values:
findingstype [required]enum
Severity override resource type.
severity_overrideAllowed enum values:
severity_overrideApply a severity override to security findings returns "Accepted" response
{
"data": {
"attributes": {
"severity": {
"action": "set",
"description": "Database contains sensitive data.",
"value": "high"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}Clear the severity override of security findings returns "Accepted" response
{
"data": {
"attributes": {
"severity": {
"action": "clear"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}Réponse
Accepted
Response for the severity override request.
Champ
Type
Description
data [required]object
Data of the severity override response.
id [required]string
Unique identifier of the severity override request.
type [required]enum
Severity override resource type.
severity_overrideAllowed enum values:
severity_overridemetaobject
Security findings skipped while processing the severity override request.
warnings[object]
Findings skipped because an automation rule set their severity.
detail [required]string
Human-readable explanation of why the finding was skipped.
finding_id [required]string
Unique identifier of the security finding.
status [required]int32
HTTP-like status code describing the outcome for this finding.
title [required]string
Short label describing the outcome for this finding.
{
"data": {
"id": "00000000-0000-0000-0000-000000000001",
"type": "severity_override"
},
"meta": {
"warnings": [
{
"detail": "cannot set severity on finding because it is overridden by an automation severity modifier rule; disable or update the automation rule first",
"finding_id": "ZGVmLTAwcC1pZXJ-aS0wZjhjNjMyZDNmMzRlZTgzNw==",
"status": 400,
"title": "Bad Request"
}
]
}
}Bad Request
API error response.
Champ
Type
Description
errors [required][object]
A list of errors.
detailstring
A human-readable explanation specific to this occurrence of the error.
metaobject
Non-standard meta-information about the error
sourceobject
References to the source of the error.
headerstring
A string indicating the name of a single request header which caused the error.
parameterstring
A string indicating which URI query parameter caused the error.
pointerstring
A JSON pointer to the value in the request document that caused the error.
statusstring
Status code of the response.
titlestring
Short human-readable summary of the error.
{
"errors": [
{
"detail": "Missing required attribute in body",
"meta": {},
"source": {
"header": "Authorization",
"parameter": "limit",
"pointer": "/data/attributes/title"
},
"status": "400",
"title": "Bad Request"
}
]
}Unauthorized
API error response.
Champ
Type
Description
errors [required][string]
A list of errors.
{
"errors": [
"Bad Request"
]
}Forbidden
API error response.
Champ
Type
Description
errors [required][string]
A list of errors.
{
"errors": [
"Bad Request"
]
}Not Found
API error response.
Champ
Type
Description
errors [required][object]
A list of errors.
detailstring
A human-readable explanation specific to this occurrence of the error.
metaobject
Non-standard meta-information about the error
sourceobject
References to the source of the error.
headerstring
A string indicating the name of a single request header which caused the error.
parameterstring
A string indicating which URI query parameter caused the error.
pointerstring
A JSON pointer to the value in the request document that caused the error.
statusstring
Status code of the response.
titlestring
Short human-readable summary of the error.
{
"errors": [
{
"detail": "Missing required attribute in body",
"meta": {},
"source": {
"header": "Authorization",
"parameter": "limit",
"pointer": "/data/attributes/title"
},
"status": "400",
"title": "Bad Request"
}
]
}Unprocessable Entity
API error response.
Champ
Type
Description
errors [required][object]
A list of errors.
detailstring
A human-readable explanation specific to this occurrence of the error.
metaobject
Non-standard meta-information about the error
sourceobject
References to the source of the error.
headerstring
A string indicating the name of a single request header which caused the error.
parameterstring
A string indicating which URI query parameter caused the error.
pointerstring
A JSON pointer to the value in the request document that caused the error.
statusstring
Status code of the response.
titlestring
Short human-readable summary of the error.
{
"errors": [
{
"detail": "Missing required attribute in body",
"meta": {},
"source": {
"header": "Authorization",
"parameter": "limit",
"pointer": "/data/attributes/title"
},
"status": "400",
"title": "Bad Request"
}
]
}Too many requests
API error response.
Champ
Type
Description
errors [required][string]
A list of errors.
{
"errors": [
"Bad Request"
]
}Exemple de code
Apply a severity override to security findings returns "Accepted" response
# Set your Datadog site and credentials
export DD_SITE="datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "set",
"description": "Database contains sensitive data.",
"value": "high"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="us3.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "set",
"description": "Database contains sensitive data.",
"value": "high"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="us5.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "set",
"description": "Database contains sensitive data.",
"value": "high"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="datadoghq.eu"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "set",
"description": "Database contains sensitive data.",
"value": "high"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="ap1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "set",
"description": "Database contains sensitive data.",
"value": "high"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="ap2.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "set",
"description": "Database contains sensitive data.",
"value": "high"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="uk1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "set",
"description": "Database contains sensitive data.",
"value": "high"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "set",
"description": "Database contains sensitive data.",
"value": "high"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="us2.ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "set",
"description": "Database contains sensitive data.",
"value": "high"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOFClear the severity override of security findings returns "Accepted" response
# Set your Datadog site and credentials
export DD_SITE="datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "clear"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="us3.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "clear"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="us5.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "clear"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="datadoghq.eu"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "clear"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="ap1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "clear"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="ap2.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "clear"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="uk1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "clear"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "clear"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOF# Set your Datadog site and credentials
export DD_SITE="us2.ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"
curl -X PATCH "https://api.${DD_SITE}/api/v2/security/findings/severity" \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}" \
-d @- << EOF
{
"data": {
"attributes": {
"severity": {
"action": "clear"
}
},
"relationships": {
"findings": {
"data": [
{
"id": "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
"type": "findings"
}
]
}
},
"type": "severity_override"
}
}
EOFApply a severity override to security findings returns "Accepted" response
// Apply a severity override to security findings returns "Accepted" response
package main
import (
"context"
"encoding/json"
"fmt"
"os"
"github.com/DataDog/datadog-api-client-go/v2/api/datadog"
"github.com/DataDog/datadog-api-client-go/v2/api/datadogV2"
)
func main() {
body := datadogV2.SeverityOverrideRequest{
Data: datadogV2.SeverityOverrideRequestData{
Attributes: datadogV2.SeverityOverrideRequestDataAttributes{
Severity: datadogV2.SeverityOverrideAttributes{
SeverityOverrideSet: &datadogV2.SeverityOverrideSet{
Action: datadogV2.SEVERITYOVERRIDESETACTIONTYPE_SET,
Description: datadog.PtrString("Database contains sensitive data."),
Value: datadogV2.SEVERITYOVERRIDEVALUE_HIGH,
}},
},
Relationships: datadogV2.SeverityOverrideRequestDataRelationships{
Findings: datadogV2.Findings{
Data: []datadogV2.FindingData{
{
Id: "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
Type: datadogV2.FINDINGDATATYPE_FINDINGS,
},
},
},
},
Type: datadogV2.SEVERITYOVERRIDEDATATYPE_SEVERITY_OVERRIDE,
},
}
ctx := datadog.NewDefaultContext(context.Background())
ctx = context.WithValue(ctx, datadog.ContextAccessToken, os.Getenv("DD_BEARER_TOKEN"))
configuration := datadog.NewConfiguration()
configuration.SetUnstableOperationEnabled("v2.UpdateFindingsSeverity", true)
apiClient := datadog.NewAPIClient(configuration)
api := datadogV2.NewSecurityMonitoringApi(apiClient)
resp, r, err := api.UpdateFindingsSeverity(ctx, body)
if err != nil {
fmt.Fprintf(os.Stderr, "Error when calling `SecurityMonitoringApi.UpdateFindingsSeverity`: %v\n", err)
fmt.Fprintf(os.Stderr, "Full HTTP response: %v\n", r)
}
responseContent, _ := json.MarshalIndent(resp, "", " ")
fmt.Fprintf(os.Stdout, "Response from `SecurityMonitoringApi.UpdateFindingsSeverity`:\n%s\n", responseContent)
}
Clear the severity override of security findings returns "Accepted" response
// Clear the severity override of security findings returns "Accepted" response
package main
import (
"context"
"encoding/json"
"fmt"
"os"
"github.com/DataDog/datadog-api-client-go/v2/api/datadog"
"github.com/DataDog/datadog-api-client-go/v2/api/datadogV2"
)
func main() {
body := datadogV2.SeverityOverrideRequest{
Data: datadogV2.SeverityOverrideRequestData{
Attributes: datadogV2.SeverityOverrideRequestDataAttributes{
Severity: datadogV2.SeverityOverrideAttributes{
SeverityOverrideClear: &datadogV2.SeverityOverrideClear{
Action: datadogV2.SEVERITYOVERRIDECLEARACTIONTYPE_CLEAR,
}},
},
Relationships: datadogV2.SeverityOverrideRequestDataRelationships{
Findings: datadogV2.Findings{
Data: []datadogV2.FindingData{
{
Id: "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
Type: datadogV2.FINDINGDATATYPE_FINDINGS,
},
},
},
},
Type: datadogV2.SEVERITYOVERRIDEDATATYPE_SEVERITY_OVERRIDE,
},
}
ctx := datadog.NewDefaultContext(context.Background())
ctx = context.WithValue(ctx, datadog.ContextAccessToken, os.Getenv("DD_BEARER_TOKEN"))
configuration := datadog.NewConfiguration()
configuration.SetUnstableOperationEnabled("v2.UpdateFindingsSeverity", true)
apiClient := datadog.NewAPIClient(configuration)
api := datadogV2.NewSecurityMonitoringApi(apiClient)
resp, r, err := api.UpdateFindingsSeverity(ctx, body)
if err != nil {
fmt.Fprintf(os.Stderr, "Error when calling `SecurityMonitoringApi.UpdateFindingsSeverity`: %v\n", err)
fmt.Fprintf(os.Stderr, "Full HTTP response: %v\n", r)
}
responseContent, _ := json.MarshalIndent(resp, "", " ")
fmt.Fprintf(os.Stdout, "Response from `SecurityMonitoringApi.UpdateFindingsSeverity`:\n%s\n", responseContent)
}
Instructions
First install the library and its dependencies and then save the example to main.go and run following commands:
DD_SITE="datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"DD_SITE="us3.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"DD_SITE="us5.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"DD_SITE="datadoghq.eu" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"DD_SITE="ap1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"DD_SITE="ap2.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"DD_SITE="uk1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"DD_SITE="ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"DD_SITE="us2.ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" go run "main.go"Apply a severity override to security findings returns "Accepted" response
// Apply a severity override to security findings returns "Accepted" response
import com.datadog.api.client.ApiClient;
import com.datadog.api.client.ApiException;
import com.datadog.api.client.v2.api.SecurityMonitoringApi;
import com.datadog.api.client.v2.model.FindingData;
import com.datadog.api.client.v2.model.FindingDataType;
import com.datadog.api.client.v2.model.Findings;
import com.datadog.api.client.v2.model.SeverityOverrideAttributes;
import com.datadog.api.client.v2.model.SeverityOverrideDataType;
import com.datadog.api.client.v2.model.SeverityOverrideRequest;
import com.datadog.api.client.v2.model.SeverityOverrideRequestData;
import com.datadog.api.client.v2.model.SeverityOverrideRequestDataAttributes;
import com.datadog.api.client.v2.model.SeverityOverrideRequestDataRelationships;
import com.datadog.api.client.v2.model.SeverityOverrideResponse;
import com.datadog.api.client.v2.model.SeverityOverrideSet;
import com.datadog.api.client.v2.model.SeverityOverrideSetActionType;
import com.datadog.api.client.v2.model.SeverityOverrideValue;
import java.util.Collections;
public class Example {
public static void main(String[] args) {
ApiClient defaultClient = ApiClient.getDefaultApiClient();
defaultClient.setAccessToken(System.getenv("DD_BEARER_TOKEN"));
defaultClient.setUnstableOperationEnabled("v2.updateFindingsSeverity", true);
SecurityMonitoringApi apiInstance = new SecurityMonitoringApi(defaultClient);
SeverityOverrideRequest body =
new SeverityOverrideRequest()
.data(
new SeverityOverrideRequestData()
.attributes(
new SeverityOverrideRequestDataAttributes()
.severity(
new SeverityOverrideAttributes(
new SeverityOverrideSet()
.action(SeverityOverrideSetActionType.SET)
.description("Database contains sensitive data.")
.value(SeverityOverrideValue.HIGH))))
.relationships(
new SeverityOverrideRequestDataRelationships()
.findings(
new Findings()
.data(
Collections.singletonList(
new FindingData()
.id(
"ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=")
.type(FindingDataType.FINDINGS)))))
.type(SeverityOverrideDataType.SEVERITY_OVERRIDE));
try {
SeverityOverrideResponse result = apiInstance.updateFindingsSeverity(body);
System.out.println(result);
} catch (ApiException e) {
System.err.println("Exception when calling SecurityMonitoringApi#updateFindingsSeverity");
System.err.println("Status code: " + e.getCode());
System.err.println("Reason: " + e.getResponseBody());
System.err.println("Response headers: " + e.getResponseHeaders());
e.printStackTrace();
}
}
}
Clear the severity override of security findings returns "Accepted" response
// Clear the severity override of security findings returns "Accepted" response
import com.datadog.api.client.ApiClient;
import com.datadog.api.client.ApiException;
import com.datadog.api.client.v2.api.SecurityMonitoringApi;
import com.datadog.api.client.v2.model.FindingData;
import com.datadog.api.client.v2.model.FindingDataType;
import com.datadog.api.client.v2.model.Findings;
import com.datadog.api.client.v2.model.SeverityOverrideAttributes;
import com.datadog.api.client.v2.model.SeverityOverrideClear;
import com.datadog.api.client.v2.model.SeverityOverrideClearActionType;
import com.datadog.api.client.v2.model.SeverityOverrideDataType;
import com.datadog.api.client.v2.model.SeverityOverrideRequest;
import com.datadog.api.client.v2.model.SeverityOverrideRequestData;
import com.datadog.api.client.v2.model.SeverityOverrideRequestDataAttributes;
import com.datadog.api.client.v2.model.SeverityOverrideRequestDataRelationships;
import com.datadog.api.client.v2.model.SeverityOverrideResponse;
import java.util.Collections;
public class Example {
public static void main(String[] args) {
ApiClient defaultClient = ApiClient.getDefaultApiClient();
defaultClient.setAccessToken(System.getenv("DD_BEARER_TOKEN"));
defaultClient.setUnstableOperationEnabled("v2.updateFindingsSeverity", true);
SecurityMonitoringApi apiInstance = new SecurityMonitoringApi(defaultClient);
SeverityOverrideRequest body =
new SeverityOverrideRequest()
.data(
new SeverityOverrideRequestData()
.attributes(
new SeverityOverrideRequestDataAttributes()
.severity(
new SeverityOverrideAttributes(
new SeverityOverrideClear()
.action(SeverityOverrideClearActionType.CLEAR))))
.relationships(
new SeverityOverrideRequestDataRelationships()
.findings(
new Findings()
.data(
Collections.singletonList(
new FindingData()
.id(
"ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=")
.type(FindingDataType.FINDINGS)))))
.type(SeverityOverrideDataType.SEVERITY_OVERRIDE));
try {
SeverityOverrideResponse result = apiInstance.updateFindingsSeverity(body);
System.out.println(result);
} catch (ApiException e) {
System.err.println("Exception when calling SecurityMonitoringApi#updateFindingsSeverity");
System.err.println("Status code: " + e.getCode());
System.err.println("Reason: " + e.getResponseBody());
System.err.println("Response headers: " + e.getResponseHeaders());
e.printStackTrace();
}
}
}
Instructions
First install the library and its dependencies and then save the example to Example.java and run following commands:
DD_SITE="datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"DD_SITE="us3.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"DD_SITE="us5.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"DD_SITE="datadoghq.eu" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"DD_SITE="ap1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"DD_SITE="ap2.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"DD_SITE="uk1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"DD_SITE="ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"DD_SITE="us2.ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" java "Example.java"Apply a severity override to security findings returns "Accepted" response
"""
Apply a severity override to security findings returns "Accepted" response
"""
from os import environ
from datadog_api_client import ApiClient, Configuration
from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
from datadog_api_client.v2.model.finding_data import FindingData
from datadog_api_client.v2.model.finding_data_type import FindingDataType
from datadog_api_client.v2.model.findings import Findings
from datadog_api_client.v2.model.severity_override_data_type import SeverityOverrideDataType
from datadog_api_client.v2.model.severity_override_request import SeverityOverrideRequest
from datadog_api_client.v2.model.severity_override_request_data import SeverityOverrideRequestData
from datadog_api_client.v2.model.severity_override_request_data_attributes import SeverityOverrideRequestDataAttributes
from datadog_api_client.v2.model.severity_override_request_data_relationships import (
SeverityOverrideRequestDataRelationships,
)
from datadog_api_client.v2.model.severity_override_set import SeverityOverrideSet
from datadog_api_client.v2.model.severity_override_set_action_type import SeverityOverrideSetActionType
from datadog_api_client.v2.model.severity_override_value import SeverityOverrideValue
body = SeverityOverrideRequest(
data=SeverityOverrideRequestData(
attributes=SeverityOverrideRequestDataAttributes(
severity=SeverityOverrideSet(
action=SeverityOverrideSetActionType.SET,
description="Database contains sensitive data.",
value=SeverityOverrideValue.HIGH,
),
),
relationships=SeverityOverrideRequestDataRelationships(
findings=Findings(
data=[
FindingData(
id="ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
type=FindingDataType.FINDINGS,
),
],
),
),
type=SeverityOverrideDataType.SEVERITY_OVERRIDE,
),
)
configuration = Configuration()
configuration.access_token = environ["DD_BEARER_TOKEN"]
configuration.unstable_operations["update_findings_severity"] = True
with ApiClient(configuration) as api_client:
api_instance = SecurityMonitoringApi(api_client)
response = api_instance.update_findings_severity(body=body)
print(response)
Clear the severity override of security findings returns "Accepted" response
"""
Clear the severity override of security findings returns "Accepted" response
"""
from os import environ
from datadog_api_client import ApiClient, Configuration
from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
from datadog_api_client.v2.model.finding_data import FindingData
from datadog_api_client.v2.model.finding_data_type import FindingDataType
from datadog_api_client.v2.model.findings import Findings
from datadog_api_client.v2.model.severity_override_clear import SeverityOverrideClear
from datadog_api_client.v2.model.severity_override_clear_action_type import SeverityOverrideClearActionType
from datadog_api_client.v2.model.severity_override_data_type import SeverityOverrideDataType
from datadog_api_client.v2.model.severity_override_request import SeverityOverrideRequest
from datadog_api_client.v2.model.severity_override_request_data import SeverityOverrideRequestData
from datadog_api_client.v2.model.severity_override_request_data_attributes import SeverityOverrideRequestDataAttributes
from datadog_api_client.v2.model.severity_override_request_data_relationships import (
SeverityOverrideRequestDataRelationships,
)
body = SeverityOverrideRequest(
data=SeverityOverrideRequestData(
attributes=SeverityOverrideRequestDataAttributes(
severity=SeverityOverrideClear(
action=SeverityOverrideClearActionType.CLEAR,
),
),
relationships=SeverityOverrideRequestDataRelationships(
findings=Findings(
data=[
FindingData(
id="ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
type=FindingDataType.FINDINGS,
),
],
),
),
type=SeverityOverrideDataType.SEVERITY_OVERRIDE,
),
)
configuration = Configuration()
configuration.access_token = environ["DD_BEARER_TOKEN"]
configuration.unstable_operations["update_findings_severity"] = True
with ApiClient(configuration) as api_client:
api_instance = SecurityMonitoringApi(api_client)
response = api_instance.update_findings_severity(body=body)
print(response)
Instructions
First install the library and its dependencies and then save the example to example.py and run following commands:
DD_SITE="datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"DD_SITE="us3.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"DD_SITE="us5.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"DD_SITE="datadoghq.eu" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"DD_SITE="ap1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"DD_SITE="ap2.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"DD_SITE="uk1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"DD_SITE="ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"DD_SITE="us2.ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" python3 "example.py"Apply a severity override to security findings returns "Accepted" response
# Apply a severity override to security findings returns "Accepted" response
require "datadog_api_client"
DatadogAPIClient.configure do |config|
config.access_token = ENV["DD_BEARER_TOKEN"]
config.unstable_operations["v2.update_findings_severity".to_sym] = true
end
api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
body = DatadogAPIClient::V2::SeverityOverrideRequest.new({
data: DatadogAPIClient::V2::SeverityOverrideRequestData.new({
attributes: DatadogAPIClient::V2::SeverityOverrideRequestDataAttributes.new({
severity: DatadogAPIClient::V2::SeverityOverrideSet.new({
action: DatadogAPIClient::V2::SeverityOverrideSetActionType::SET,
description: "Database contains sensitive data.",
value: DatadogAPIClient::V2::SeverityOverrideValue::HIGH,
}),
}),
relationships: DatadogAPIClient::V2::SeverityOverrideRequestDataRelationships.new({
findings: DatadogAPIClient::V2::Findings.new({
data: [
DatadogAPIClient::V2::FindingData.new({
id: "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
type: DatadogAPIClient::V2::FindingDataType::FINDINGS,
}),
],
}),
}),
type: DatadogAPIClient::V2::SeverityOverrideDataType::SEVERITY_OVERRIDE,
}),
})
p api_instance.update_findings_severity(body)
Clear the severity override of security findings returns "Accepted" response
# Clear the severity override of security findings returns "Accepted" response
require "datadog_api_client"
DatadogAPIClient.configure do |config|
config.access_token = ENV["DD_BEARER_TOKEN"]
config.unstable_operations["v2.update_findings_severity".to_sym] = true
end
api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
body = DatadogAPIClient::V2::SeverityOverrideRequest.new({
data: DatadogAPIClient::V2::SeverityOverrideRequestData.new({
attributes: DatadogAPIClient::V2::SeverityOverrideRequestDataAttributes.new({
severity: DatadogAPIClient::V2::SeverityOverrideClear.new({
action: DatadogAPIClient::V2::SeverityOverrideClearActionType::CLEAR,
}),
}),
relationships: DatadogAPIClient::V2::SeverityOverrideRequestDataRelationships.new({
findings: DatadogAPIClient::V2::Findings.new({
data: [
DatadogAPIClient::V2::FindingData.new({
id: "ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=",
type: DatadogAPIClient::V2::FindingDataType::FINDINGS,
}),
],
}),
}),
type: DatadogAPIClient::V2::SeverityOverrideDataType::SEVERITY_OVERRIDE,
}),
})
p api_instance.update_findings_severity(body)
Instructions
First install the library and its dependencies and then save the example to example.rb and run following commands:
DD_SITE="datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"DD_SITE="us3.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"DD_SITE="us5.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"DD_SITE="datadoghq.eu" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"DD_SITE="ap1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"DD_SITE="ap2.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"DD_SITE="uk1.datadoghq.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"DD_SITE="ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"DD_SITE="us2.ddog-gov.com" DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>" rb "example.rb"Apply a severity override to security findings returns "Accepted" response
// Apply a severity override to security findings returns "Accepted" response
use datadog_api_client::datadog;
use datadog_api_client::datadogV2::api_security_monitoring::SecurityMonitoringAPI;
use datadog_api_client::datadogV2::model::FindingData;
use datadog_api_client::datadogV2::model::FindingDataType;
use datadog_api_client::datadogV2::model::Findings;
use datadog_api_client::datadogV2::model::SeverityOverrideAttributes;
use datadog_api_client::datadogV2::model::SeverityOverrideDataType;
use datadog_api_client::datadogV2::model::SeverityOverrideRequest;
use datadog_api_client::datadogV2::model::SeverityOverrideRequestData;
use datadog_api_client::datadogV2::model::SeverityOverrideRequestDataAttributes;
use datadog_api_client::datadogV2::model::SeverityOverrideRequestDataRelationships;
use datadog_api_client::datadogV2::model::SeverityOverrideSet;
use datadog_api_client::datadogV2::model::SeverityOverrideSetActionType;
use datadog_api_client::datadogV2::model::SeverityOverrideValue;
#[tokio::main]
async fn main() {
let body = SeverityOverrideRequest::new(SeverityOverrideRequestData::new(
SeverityOverrideRequestDataAttributes::new(
SeverityOverrideAttributes::SeverityOverrideSet(Box::new(
SeverityOverrideSet::new(
SeverityOverrideSetActionType::SET,
SeverityOverrideValue::HIGH,
)
.description("Database contains sensitive data.".to_string()),
)),
),
SeverityOverrideRequestDataRelationships::new(Findings::new().data(vec![
FindingData::new(
"ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=".to_string(),
FindingDataType::FINDINGS,
),
])),
SeverityOverrideDataType::SEVERITY_OVERRIDE,
));
let mut configuration = datadog::Configuration::new();
configuration.set_unstable_operation_enabled("v2.update_findings_severity", true);
let api = SecurityMonitoringAPI::with_config(configuration);
let resp = api.update_findings_severity(body).await;
if let Ok(value) = resp {
println!("{:#?}", value);
} else {
println!("{:#?}", resp.unwrap_err());
}
}
Clear the severity override of security findings returns "Accepted" response
// Clear the severity override of security findings returns "Accepted" response
use datadog_api_client::datadog;
use datadog_api_client::datadogV2::api_security_monitoring::SecurityMonitoringAPI;
use datadog_api_client::datadogV2::model::FindingData;
use datadog_api_client::datadogV2::model::FindingDataType;
use datadog_api_client::datadogV2::model::Findings;
use datadog_api_client::datadogV2::model::SeverityOverrideAttributes;
use datadog_api_client::datadogV2::model::SeverityOverrideClear;
use datadog_api_client::datadogV2::model::SeverityOverrideClearActionType;
use datadog_api_client::datadogV2::model::SeverityOverrideDataType;
use datadog_api_client::datadogV2::model::SeverityOverrideRequest;
use datadog_api_client::datadogV2::model::SeverityOverrideRequestData;
use datadog_api_client::datadogV2::model::SeverityOverrideRequestDataAttributes;
use datadog_api_client::datadogV2::model::SeverityOverrideRequestDataRelationships;
#[tokio::main]
async fn main() {
let body = SeverityOverrideRequest::new(SeverityOverrideRequestData::new(
SeverityOverrideRequestDataAttributes::new(
SeverityOverrideAttributes::SeverityOverrideClear(Box::new(
SeverityOverrideClear::new(SeverityOverrideClearActionType::CLEAR),
)),
),
SeverityOverrideRequestDataRelationships::new(Findings::new().data(vec![
FindingData::new(
"ZGVmLTAwMC0wYmd-MDE4NjcyMDJkMzE4MDE5ODY5MGE4ZmQ2MmFlMjg0Y2M=".to_string(),
FindingDataType::FINDINGS,
),
])),
SeverityOverrideDataType::SEVERITY_OVERRIDE,
));
let mut configuration = datadog::Configuration::new();
configuration.set_unstable_operation_enabled("v2.update_findings_severity", true);
let api = SecurityMonitoringAPI::with_config(configuration);
let resp = api.update_findings_severity(body).await;
if let Ok(value) = resp {
println!("{:#?}", value);
} else {
println!("{:#?}", resp.unwrap_err());
}
}
Instructions
First install the library and its dependencies and then save the example to src/main.rs and run following commands:
DD_SITE="datadoghq.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo runDD_SITE="us3.datadoghq.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo runDD_SITE="us5.datadoghq.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo runDD_SITE="datadoghq.eu" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo runDD_SITE="ap1.datadoghq.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo runDD_SITE="ap2.datadoghq.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo runDD_SITE="uk1.datadoghq.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo runDD_SITE="ddog-gov.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo runDD_SITE="us2.ddog-gov.com" DD_API_KEY="<DD_API_KEY>" DD_APP_KEY="<DD_APP_KEY>" cargo run