Data containing the triage state or assignee update for a security signal.
attributes [required]
object
Attributes for updating the triage state or assignee of a security signal.
archive_comment
string
Optional comment to display on archived signals.
archive_reason
enum
Reason a signal is archived.
Allowed enum values: none,false_positive,testing_or_maintenance,remediated,investigated_case_opened,true_positive_benign,true_positive_malicious,other
assignee
object
Object representing a given user entity.
handle
string
The handle for this user account.
icon
string
Gravatar icon associated to the user.
id
int64
Numerical ID assigned by Datadog to this user account.
name
string
The name for this user account.
uuid [required]
string
UUID assigned by Datadog to this user account.
state
enum
The new triage state of the signal.
Allowed enum values: open,archived,under_review
version
int64
Version of the updated signal. If server side version is higher, update will be rejected.
type
enum
The type of event.
Allowed enum values: signal_metadata
The response returned after all triage operations, containing the updated signal triage data.
Expand All
Field
Type
Description
data [required]
object
Data containing the updated triage attributes of the signal.
attributes
object
Attributes describing a triage state update operation over a security signal.
archive_comment
string
Optional comment to display on archived signals.
archive_comment_timestamp
int64
Timestamp of the last edit to the comment.
archive_comment_user
object
Object representing a given user entity.
handle
string
The handle for this user account.
icon
string
Gravatar icon associated to the user.
id
int64
Numerical ID assigned by Datadog to this user account.
name
string
The name for this user account.
uuid [required]
string
UUID assigned by Datadog to this user account.
archive_reason
enum
Reason a signal is archived.
Allowed enum values: none,false_positive,testing_or_maintenance,remediated,investigated_case_opened,true_positive_benign,true_positive_malicious,other
assignee [required]
object
Object representing a given user entity.
handle
string
The handle for this user account.
icon
string
Gravatar icon associated to the user.
id
int64
Numerical ID assigned by Datadog to this user account.
name
string
The name for this user account.
uuid [required]
string
UUID assigned by Datadog to this user account.
incident_ids [required]
[integer]
Array of incidents that are associated with this signal.
state [required]
enum
The new triage state of the signal.
Allowed enum values: open,archived,under_review
state_update_timestamp
int64
Timestamp of the last update to the signal state.
state_update_user
object
Object representing a given user entity.
handle
string
The handle for this user account.
icon
string
Gravatar icon associated to the user.
id
int64
Numerical ID assigned by Datadog to this user account.
name
string
The name for this user account.
uuid [required]
string
UUID assigned by Datadog to this user account.
id
string
The unique ID of the security signal.
type
enum
The type of event.
Allowed enum values: signal_metadata
"""
Update security signal triage state or assignee returns "OK" response
"""fromdatadog_api_clientimportApiClient,Configurationfromdatadog_api_client.v2.api.security_monitoring_apiimportSecurityMonitoringApifromdatadog_api_client.v2.model.security_monitoring_signal_archive_reasonimportSecurityMonitoringSignalArchiveReasonfromdatadog_api_client.v2.model.security_monitoring_signal_metadata_typeimportSecurityMonitoringSignalMetadataTypefromdatadog_api_client.v2.model.security_monitoring_signal_stateimportSecurityMonitoringSignalStatefromdatadog_api_client.v2.model.security_monitoring_signal_update_attributesimport(SecurityMonitoringSignalUpdateAttributes,)fromdatadog_api_client.v2.model.security_monitoring_signal_update_dataimportSecurityMonitoringSignalUpdateDatafromdatadog_api_client.v2.model.security_monitoring_signal_update_requestimportSecurityMonitoringSignalUpdateRequestfromdatadog_api_client.v2.model.security_monitoring_triage_userimportSecurityMonitoringTriageUserbody=SecurityMonitoringSignalUpdateRequest(data=SecurityMonitoringSignalUpdateData(attributes=SecurityMonitoringSignalUpdateAttributes(archive_reason=SecurityMonitoringSignalArchiveReason.NONE,assignee=SecurityMonitoringTriageUser(uuid="773b045d-ccf8-4808-bd3b-955ef6a8c940",),state=SecurityMonitoringSignalState.OPEN,),type=SecurityMonitoringSignalMetadataType.SIGNAL_METADATA,),)configuration=Configuration()withApiClient(configuration)asapi_client:api_instance=SecurityMonitoringApi(api_client)response=api_instance.edit_security_monitoring_signal(signal_id="signal_id",body=body)print(response)
# Update security signal triage state or assignee returns "OK" responserequire"datadog_api_client"api_instance=DatadogAPIClient::V2::SecurityMonitoringAPI.newbody=DatadogAPIClient::V2::SecurityMonitoringSignalUpdateRequest.new({data:DatadogAPIClient::V2::SecurityMonitoringSignalUpdateData.new({attributes:DatadogAPIClient::V2::SecurityMonitoringSignalUpdateAttributes.new({archive_reason:DatadogAPIClient::V2::SecurityMonitoringSignalArchiveReason::NONE,assignee:DatadogAPIClient::V2::SecurityMonitoringTriageUser.new({uuid:"773b045d-ccf8-4808-bd3b-955ef6a8c940",}),state:DatadogAPIClient::V2::SecurityMonitoringSignalState::OPEN,}),type:DatadogAPIClient::V2::SecurityMonitoringSignalMetadataType::SIGNAL_METADATA,}),})papi_instance.edit_security_monitoring_signal("signal_id",body)
// Update security signal triage state or assignee returns "OK" responsepackagemainimport("context""encoding/json""fmt""os""github.com/DataDog/datadog-api-client-go/v2/api/datadog""github.com/DataDog/datadog-api-client-go/v2/api/datadogV2")funcmain(){body:=datadogV2.SecurityMonitoringSignalUpdateRequest{Data:datadogV2.SecurityMonitoringSignalUpdateData{Attributes:datadogV2.SecurityMonitoringSignalUpdateAttributes{ArchiveReason:datadogV2.SECURITYMONITORINGSIGNALARCHIVEREASON_NONE.Ptr(),Assignee:&datadogV2.SecurityMonitoringTriageUser{Uuid:"773b045d-ccf8-4808-bd3b-955ef6a8c940",},State:datadogV2.SECURITYMONITORINGSIGNALSTATE_OPEN.Ptr(),},Type:datadogV2.SECURITYMONITORINGSIGNALMETADATATYPE_SIGNAL_METADATA.Ptr(),},}ctx:=datadog.NewDefaultContext(context.Background())configuration:=datadog.NewConfiguration()apiClient:=datadog.NewAPIClient(configuration)api:=datadogV2.NewSecurityMonitoringApi(apiClient)resp,r,err:=api.EditSecurityMonitoringSignal(ctx,"signal_id",body)iferr!=nil{fmt.Fprintf(os.Stderr,"Error when calling `SecurityMonitoringApi.EditSecurityMonitoringSignal`: %v\n",err)fmt.Fprintf(os.Stderr,"Full HTTP response: %v\n",r)}responseContent,_:=json.MarshalIndent(resp,""," ")fmt.Fprintf(os.Stdout,"Response from `SecurityMonitoringApi.EditSecurityMonitoringSignal`:\n%s\n",responseContent)}
// Update security signal triage state or assignee returns "OK" responseimportcom.datadog.api.client.ApiClient;importcom.datadog.api.client.ApiException;importcom.datadog.api.client.v2.api.SecurityMonitoringApi;importcom.datadog.api.client.v2.model.SecurityMonitoringSignalArchiveReason;importcom.datadog.api.client.v2.model.SecurityMonitoringSignalMetadataType;importcom.datadog.api.client.v2.model.SecurityMonitoringSignalState;importcom.datadog.api.client.v2.model.SecurityMonitoringSignalTriageUpdateResponse;importcom.datadog.api.client.v2.model.SecurityMonitoringSignalUpdateAttributes;importcom.datadog.api.client.v2.model.SecurityMonitoringSignalUpdateData;importcom.datadog.api.client.v2.model.SecurityMonitoringSignalUpdateRequest;importcom.datadog.api.client.v2.model.SecurityMonitoringTriageUser;publicclassExample{publicstaticvoidmain(String[]args){ApiClientdefaultClient=ApiClient.getDefaultApiClient();SecurityMonitoringApiapiInstance=newSecurityMonitoringApi(defaultClient);SecurityMonitoringSignalUpdateRequestbody=newSecurityMonitoringSignalUpdateRequest().data(newSecurityMonitoringSignalUpdateData().attributes(newSecurityMonitoringSignalUpdateAttributes().archiveReason(SecurityMonitoringSignalArchiveReason.NONE).assignee(newSecurityMonitoringTriageUser().uuid("773b045d-ccf8-4808-bd3b-955ef6a8c940")).state(SecurityMonitoringSignalState.OPEN)).type(SecurityMonitoringSignalMetadataType.SIGNAL_METADATA));try{SecurityMonitoringSignalTriageUpdateResponseresult=apiInstance.editSecurityMonitoringSignal("signal_id",body);System.out.println(result);}catch(ApiExceptione){System.err.println("Exception when calling SecurityMonitoringApi#editSecurityMonitoringSignal");System.err.println("Status code: "+e.getCode());System.err.println("Reason: "+e.getResponseBody());System.err.println("Response headers: "+e.getResponseHeaders());e.printStackTrace();}}}
// Update security signal triage state or assignee returns "OK" response
usedatadog_api_client::datadog;usedatadog_api_client::datadogV2::api_security_monitoring::SecurityMonitoringAPI;usedatadog_api_client::datadogV2::model::SecurityMonitoringSignalArchiveReason;usedatadog_api_client::datadogV2::model::SecurityMonitoringSignalMetadataType;usedatadog_api_client::datadogV2::model::SecurityMonitoringSignalState;usedatadog_api_client::datadogV2::model::SecurityMonitoringSignalUpdateAttributes;usedatadog_api_client::datadogV2::model::SecurityMonitoringSignalUpdateData;usedatadog_api_client::datadogV2::model::SecurityMonitoringSignalUpdateRequest;usedatadog_api_client::datadogV2::model::SecurityMonitoringTriageUser;#[tokio::main]asyncfnmain(){letbody=SecurityMonitoringSignalUpdateRequest::new(SecurityMonitoringSignalUpdateData::new(SecurityMonitoringSignalUpdateAttributes::new().archive_reason(SecurityMonitoringSignalArchiveReason::NONE).assignee(SecurityMonitoringTriageUser::new("773b045d-ccf8-4808-bd3b-955ef6a8c940".to_string(),)).state(SecurityMonitoringSignalState::OPEN),).type_(SecurityMonitoringSignalMetadataType::SIGNAL_METADATA),);letconfiguration=datadog::Configuration::new();letapi=SecurityMonitoringAPI::with_config(configuration);letresp=api.edit_security_monitoring_signal("signal_id".to_string(),body).await;ifletOk(value)=resp{println!("{:#?}",value);}else{println!("{:#?}",resp.unwrap_err());}}
DD_SITE="datadoghq.comus3.datadoghq.comus5.datadoghq.comdatadoghq.euap1.datadoghq.comap2.datadoghq.comddog-gov.comus2.ddog-gov.com"DD_API_KEY="<DD_API_KEY>"DD_APP_KEY="<DD_APP_KEY>"cargo run
/**
* Update security signal triage state or assignee returns "OK" response
*/import{client,v2}from"@datadog/datadog-api-client";constconfiguration=client.createConfiguration();constapiInstance=newv2.SecurityMonitoringApi(configuration);constparams: v2.SecurityMonitoringApiEditSecurityMonitoringSignalRequest={body:{data:{attributes:{archiveReason:"none",assignee:{uuid:"773b045d-ccf8-4808-bd3b-955ef6a8c940",},state:"open",},type:"signal_metadata",},},signalId:"signal_id",};apiInstance.editSecurityMonitoringSignal(params).then((data: v2.SecurityMonitoringSignalTriageUpdateResponse)=>{console.log("API called successfully. Returned data: "+JSON.stringify(data));}).catch((error: any)=>console.error(error));