PATCH https://api.ap1.datadoghq.com/api/v2/remote_config/products/cws/agent_rules/{agent_rule_id}https://api.datadoghq.eu/api/v2/remote_config/products/cws/agent_rules/{agent_rule_id}https://api.ddog-gov.com/api/v2/remote_config/products/cws/agent_rules/{agent_rule_id}https://api.datadoghq.com/api/v2/remote_config/products/cws/agent_rules/{agent_rule_id}https://api.us3.datadoghq.com/api/v2/remote_config/products/cws/agent_rules/{agent_rule_id}https://api.us5.datadoghq.com/api/v2/remote_config/products/cws/agent_rules/{agent_rule_id}
Présentation
Update a specific Cloud Security Management Threats Agent rule.
Returns the Agent rule object when the request is successful.
Arguments
Paramètres du chemin
The ID of the Agent rule.
Requête
Body Data (required)
New definition of the Agent rule.
Expand All
Object for a single Agent rule.
Update an existing Cloud Workload Security Agent rule.
The description of the Agent rule.
Whether the Agent rule is enabled.
The SECL expression of the Agent rule.
The ID of the agent rule.
The type of the resource. The value should always be agent_rule
.
Allowed enum values: agent_rule
default: agent_rule
{
"data": {
"attributes": {
"description": "Test Agent rule",
"enabled": true,
"expression": "exec.file.name == \"sh\""
},
"type": "agent_rule",
"id": "3dd-0uc-h1s"
}
}
Réponse
OK
Response object that includes an Agent rule.
Expand All
Object for a single Agent rule.
A Cloud Workload Security Agent rule returned by the API.
The array of actions the rule can perform if triggered.
SECL expression used to target the container to apply the action on
Kill system call applied on the container matching the rule
Supported signals for the kill system call.
The version of the agent.
The category of the Agent rule.
The ID of the user who created the rule.
When the Agent rule was created, timestamp in milliseconds.
The attributes of the user who created the Agent rule.
Whether the rule is included by default.
The description of the Agent rule.
Whether the Agent rule is enabled.
The SECL expression of the Agent rule.
The platforms the Agent rule is supported on.
The name of the Agent rule.
The ID of the user who updated the rule.
Timestamp in milliseconds when the Agent rule was last updated.
When the Agent rule was last updated, timestamp in milliseconds.
The attributes of the user who last updated the Agent rule.
The version of the Agent rule.
The ID of the Agent rule.
The type of the resource. The value should always be agent_rule
.
Allowed enum values: agent_rule
default: agent_rule
{
"data": {
"attributes": {
"actions": [
{
"filter": "string",
"kill": {
"signal": "string"
}
}
],
"agentConstraint": "string",
"category": "Process Activity",
"creationAuthorUuId": "e51c9744-d158-11ec-ad23-da7ad0900002",
"creationDate": 1624366480320,
"creator": {
"handle": "datadog.user@example.com",
"name": "Datadog User"
},
"defaultRule": false,
"description": "My Agent rule",
"enabled": true,
"expression": "exec.file.name == \\\"sh\\\"",
"filters": [],
"name":