--- title: Security Monitoring description: Datadog, the leading service for cloud-scale monitoring. breadcrumbs: Docs > API Reference > Security Monitoring --- > For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt). # Security Monitoring Create and manage your security rules, signals, filters, and more. See the [Datadog Security page](https://docs.datadoghq.com/security.md) for more information. ## [Change the triage state of a security signal →](https://docs.datadoghq.com/api/latest/security-monitoring/change-the-triage-state-of-a-security-signal.md){% #change-the-triage-state-of-a-security-signal %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/state | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/state | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security_monitoring/signals/{signal_id}/state | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id}/state | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id}/state | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/state | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/state | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/state | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/state | ## [List findings →](https://docs.datadoghq.com/api/latest/security-monitoring/list-findings.md) preview{% #list-findings %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/posture_management/findings | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/posture_management/findings | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/posture_management/findings | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/posture_management/findings | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/posture_management/findings | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/posture_management/findings | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/posture_management/findings | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/posture_management/findings | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/posture_management/findings | ## [Add a security signal to an incident →](https://docs.datadoghq.com/api/latest/security-monitoring/add-a-security-signal-to-an-incident.md){% #add-a-security-signal-to-an-incident %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v1/security_analytics/signals/{signal_id}/add_to_incident | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v1/security_analytics/signals/{signal_id}/add_to_incident | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v1/security_analytics/signals/{signal_id}/add_to_incident | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v1/security_analytics/signals/{signal_id}/add_to_incident | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v1/security_analytics/signals/{signal_id}/add_to_incident | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v1/security_analytics/signals/{signal_id}/add_to_incident | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v1/security_analytics/signals/{signal_id}/add_to_incident | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v1/security_analytics/signals/{signal_id}/add_to_incident | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v1/security_analytics/signals/{signal_id}/add_to_incident | ## [Get a finding →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-finding.md) preview{% #get-a-finding %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/posture_management/findings/{finding_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/posture_management/findings/{finding_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/posture_management/findings/{finding_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/posture_management/findings/{finding_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/posture_management/findings/{finding_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/posture_management/findings/{finding_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/posture_management/findings/{finding_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/posture_management/findings/{finding_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/posture_management/findings/{finding_id} | ## [Get the list of vulnerability notification rules →](https://docs.datadoghq.com/api/latest/security-monitoring/get-the-list-of-vulnerability-notification-rules.md){% #get-the-list-of-vulnerability-notification-rules %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------ | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/vulnerabilities/notification_rules | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/vulnerabilities/notification_rules | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/vulnerabilities/notification_rules | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/vulnerabilities/notification_rules | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/vulnerabilities/notification_rules | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/vulnerabilities/notification_rules | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/vulnerabilities/notification_rules | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/vulnerabilities/notification_rules | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/vulnerabilities/notification_rules | ## [Modify the triage assignee of a security signal →](https://docs.datadoghq.com/api/latest/security-monitoring/modify-the-triage-assignee-of-a-security-signal.md){% #modify-the-triage-assignee-of-a-security-signal %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/assignee | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/assignee | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security_monitoring/signals/{signal_id}/assignee | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id}/assignee | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id}/assignee | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/assignee | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/assignee | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/assignee | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/assignee | ## [Create a new vulnerability-based notification rule →](https://docs.datadoghq.com/api/latest/security-monitoring/create-a-new-vulnerability-based-notification-rule.md){% #create-a-new-vulnerability-based-notification-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/vulnerabilities/notification_rules | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/vulnerabilities/notification_rules | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/vulnerabilities/notification_rules | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/vulnerabilities/notification_rules | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/vulnerabilities/notification_rules | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/vulnerabilities/notification_rules | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/vulnerabilities/notification_rules | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/vulnerabilities/notification_rules | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/vulnerabilities/notification_rules | ## [Get details of a vulnerability notification rule →](https://docs.datadoghq.com/api/latest/security-monitoring/get-details-of-a-vulnerability-notification-rule.md){% #get-details-of-a-vulnerability-notification-rule %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/vulnerabilities/notification_rules/{id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/vulnerabilities/notification_rules/{id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/vulnerabilities/notification_rules/{id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | ## [Delete a vulnerability-based notification rule →](https://docs.datadoghq.com/api/latest/security-monitoring/delete-a-vulnerability-based-notification-rule.md){% #delete-a-vulnerability-based-notification-rule %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/security/vulnerabilities/notification_rules/{id} | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/security/vulnerabilities/notification_rules/{id} | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/security/vulnerabilities/notification_rules/{id} | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | ## [Patch a vulnerability-based notification rule →](https://docs.datadoghq.com/api/latest/security-monitoring/patch-a-vulnerability-based-notification-rule.md){% #patch-a-vulnerability-based-notification-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security/vulnerabilities/notification_rules/{id} | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security/vulnerabilities/notification_rules/{id} | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security/vulnerabilities/notification_rules/{id} | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security/vulnerabilities/notification_rules/{id} | ## [Get the list of signal-based notification rules →](https://docs.datadoghq.com/api/latest/security-monitoring/get-the-list-of-signal-based-notification-rules.md){% #get-the-list-of-signal-based-notification-rules %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/signals/notification_rules | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/signals/notification_rules | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/signals/notification_rules | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/signals/notification_rules | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/signals/notification_rules | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/signals/notification_rules | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/signals/notification_rules | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/signals/notification_rules | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/signals/notification_rules | ## [Create a new signal-based notification rule →](https://docs.datadoghq.com/api/latest/security-monitoring/create-a-new-signal-based-notification-rule.md){% #create-a-new-signal-based-notification-rule %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/signals/notification_rules | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/signals/notification_rules | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/signals/notification_rules | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/signals/notification_rules | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/signals/notification_rules | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/signals/notification_rules | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/signals/notification_rules | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/signals/notification_rules | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/signals/notification_rules | ## [Get details of a signal-based notification rule →](https://docs.datadoghq.com/api/latest/security-monitoring/get-details-of-a-signal-based-notification-rule.md){% #get-details-of-a-signal-based-notification-rule %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/signals/notification_rules/{id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/signals/notification_rules/{id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/signals/notification_rules/{id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/signals/notification_rules/{id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/signals/notification_rules/{id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/signals/notification_rules/{id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/signals/notification_rules/{id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/signals/notification_rules/{id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/signals/notification_rules/{id} | ## [Delete a signal-based notification rule →](https://docs.datadoghq.com/api/latest/security-monitoring/delete-a-signal-based-notification-rule.md){% #delete-a-signal-based-notification-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------ | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/security/signals/notification_rules/{id} | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/security/signals/notification_rules/{id} | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/security/signals/notification_rules/{id} | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/security/signals/notification_rules/{id} | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/security/signals/notification_rules/{id} | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/security/signals/notification_rules/{id} | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/security/signals/notification_rules/{id} | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/security/signals/notification_rules/{id} | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/security/signals/notification_rules/{id} | ## [Patch a signal-based notification rule →](https://docs.datadoghq.com/api/latest/security-monitoring/patch-a-signal-based-notification-rule.md){% #patch-a-signal-based-notification-rule %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security/signals/notification_rules/{id} | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security/signals/notification_rules/{id} | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security/signals/notification_rules/{id} | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security/signals/notification_rules/{id} | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security/signals/notification_rules/{id} | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security/signals/notification_rules/{id} | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security/signals/notification_rules/{id} | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security/signals/notification_rules/{id} | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security/signals/notification_rules/{id} | ## [List security findings →](https://docs.datadoghq.com/api/latest/security-monitoring/list-security-findings.md){% #list-security-findings %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/findings | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/findings | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/findings | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/findings | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/findings | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/findings | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/findings | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/findings | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/findings | ## [Search security findings →](https://docs.datadoghq.com/api/latest/security-monitoring/search-security-findings.md){% #search-security-findings %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------ | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/search | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/search | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/search | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/search | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/search | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/search | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/search | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/search | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/search | ## [Create cases for security findings →](https://docs.datadoghq.com/api/latest/security-monitoring/create-cases-for-security-findings.md){% #create-cases-for-security-findings %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/cases | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/cases | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/cases | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/cases | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/cases | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/cases | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/cases | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/cases | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/cases | ## [Detach security findings from their case →](https://docs.datadoghq.com/api/latest/security-monitoring/detach-security-findings-from-their-case.md){% #detach-security-findings-from-their-case %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------- | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/security/findings/cases | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/security/findings/cases | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/security/findings/cases | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/security/findings/cases | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/security/findings/cases | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/security/findings/cases | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/security/findings/cases | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/security/findings/cases | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/security/findings/cases | ## [Attach security findings to a case →](https://docs.datadoghq.com/api/latest/security-monitoring/attach-security-findings-to-a-case.md){% #attach-security-findings-to-a-case %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security/findings/cases/{case_id} | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security/findings/cases/{case_id} | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security/findings/cases/{case_id} | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security/findings/cases/{case_id} | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security/findings/cases/{case_id} | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security/findings/cases/{case_id} | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security/findings/cases/{case_id} | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security/findings/cases/{case_id} | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security/findings/cases/{case_id} | ## [Create Jira issues for security findings →](https://docs.datadoghq.com/api/latest/security-monitoring/create-jira-issues-for-security-findings.md){% #create-jira-issues-for-security-findings %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/jira_issues | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/jira_issues | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/jira_issues | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/jira_issues | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/jira_issues | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/jira_issues | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/jira_issues | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/jira_issues | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/jira_issues | ## [Attach security findings to a Jira issue →](https://docs.datadoghq.com/api/latest/security-monitoring/attach-security-findings-to-a-jira-issue.md){% #attach-security-findings-to-a-jira-issue %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------ | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security/findings/jira_issues | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security/findings/jira_issues | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security/findings/jira_issues | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security/findings/jira_issues | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security/findings/jira_issues | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security/findings/jira_issues | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security/findings/jira_issues | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security/findings/jira_issues | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security/findings/jira_issues | ## [Mute or unmute security findings →](https://docs.datadoghq.com/api/latest/security-monitoring/mute-or-unmute-security-findings.md){% #mute-or-unmute-security-findings %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security/findings/mute | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security/findings/mute | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security/findings/mute | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security/findings/mute | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security/findings/mute | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security/findings/mute | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security/findings/mute | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security/findings/mute | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security/findings/mute | ## [Assign or unassign security findings →](https://docs.datadoghq.com/api/latest/security-monitoring/assign-or-unassign-security-findings.md) preview{% #assign-or-unassign-security-findings %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security/findings/assignee | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security/findings/assignee | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security/findings/assignee | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security/findings/assignee | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security/findings/assignee | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security/findings/assignee | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security/findings/assignee | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security/findings/assignee | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security/findings/assignee | ## [Create ServiceNow tickets for security findings →](https://docs.datadoghq.com/api/latest/security-monitoring/create-servicenow-tickets-for-security-findings.md){% #create-servicenow-tickets-for-security-findings %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------ | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/servicenow_tickets | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/servicenow_tickets | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/servicenow_tickets | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/servicenow_tickets | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/servicenow_tickets | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/servicenow_tickets | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/servicenow_tickets | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/servicenow_tickets | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/servicenow_tickets | ## [Attach security findings to a ServiceNow ticket →](https://docs.datadoghq.com/api/latest/security-monitoring/attach-security-findings-to-a-servicenow-ticket.md){% #attach-security-findings-to-a-servicenow-ticket %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security/findings/servicenow_tickets | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security/findings/servicenow_tickets | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security/findings/servicenow_tickets | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security/findings/servicenow_tickets | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security/findings/servicenow_tickets | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security/findings/servicenow_tickets | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security/findings/servicenow_tickets | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security/findings/servicenow_tickets | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security/findings/servicenow_tickets | ## [Update a custom framework →](https://docs.datadoghq.com/api/latest/security-monitoring/update-a-custom-framework.md){% #update-a-custom-framework %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | PUT https://api.ap1.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | ap2.datadoghq.com | PUT https://api.ap2.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | app.datadoghq.eu | PUT https://api.datadoghq.eu/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | app.ddog-gov.com | PUT https://api.ddog-gov.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | us2.ddog-gov.com | PUT https://api.us2.ddog-gov.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | uk1.datadoghq.com | PUT https://api.uk1.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | app.datadoghq.com | PUT https://api.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | us3.datadoghq.com | PUT https://api.us3.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | us5.datadoghq.com | PUT https://api.us5.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | ## [Delete a custom framework →](https://docs.datadoghq.com/api/latest/security-monitoring/delete-a-custom-framework.md){% #delete-a-custom-framework %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | ## [Get a custom framework →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-custom-framework.md){% #get-a-custom-framework %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/cloud_security_management/custom_frameworks/{handle}/{version} | ## [List resource filters →](https://docs.datadoghq.com/api/latest/security-monitoring/list-resource-filters.md){% #list-resource-filters %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/cloud_security_management/resource_filters | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/cloud_security_management/resource_filters | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/cloud_security_management/resource_filters | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/cloud_security_management/resource_filters | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/cloud_security_management/resource_filters | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/cloud_security_management/resource_filters | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/cloud_security_management/resource_filters | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/cloud_security_management/resource_filters | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/cloud_security_management/resource_filters | ## [Update resource filters →](https://docs.datadoghq.com/api/latest/security-monitoring/update-resource-filters.md){% #update-resource-filters %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------- | | ap1.datadoghq.com | PUT https://api.ap1.datadoghq.com/api/v2/cloud_security_management/resource_filters | | ap2.datadoghq.com | PUT https://api.ap2.datadoghq.com/api/v2/cloud_security_management/resource_filters | | app.datadoghq.eu | PUT https://api.datadoghq.eu/api/v2/cloud_security_management/resource_filters | | app.ddog-gov.com | PUT https://api.ddog-gov.com/api/v2/cloud_security_management/resource_filters | | us2.ddog-gov.com | PUT https://api.us2.ddog-gov.com/api/v2/cloud_security_management/resource_filters | | uk1.datadoghq.com | PUT https://api.uk1.datadoghq.com/api/v2/cloud_security_management/resource_filters | | app.datadoghq.com | PUT https://api.datadoghq.com/api/v2/cloud_security_management/resource_filters | | us3.datadoghq.com | PUT https://api.us3.datadoghq.com/api/v2/cloud_security_management/resource_filters | | us5.datadoghq.com | PUT https://api.us5.datadoghq.com/api/v2/cloud_security_management/resource_filters | ## [Create a custom framework →](https://docs.datadoghq.com/api/latest/security-monitoring/create-a-custom-framework.md){% #create-a-custom-framework %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/cloud_security_management/custom_frameworks | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/cloud_security_management/custom_frameworks | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/cloud_security_management/custom_frameworks | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/cloud_security_management/custom_frameworks | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/cloud_security_management/custom_frameworks | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/cloud_security_management/custom_frameworks | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/cloud_security_management/custom_frameworks | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/cloud_security_management/custom_frameworks | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/cloud_security_management/custom_frameworks | ## [Get all security filters →](https://docs.datadoghq.com/api/latest/security-monitoring/get-all-security-filters.md){% #get-all-security-filters %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/security_filters | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/security_filters | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/configuration/security_filters | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/configuration/security_filters | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/security_filters | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/security_filters | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/configuration/security_filters | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/security_filters | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/security_filters | ## [Create a security filter →](https://docs.datadoghq.com/api/latest/security-monitoring/create-a-security-filter.md){% #create-a-security-filter %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/security_filters | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/security_filters | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/configuration/security_filters | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/configuration/security_filters | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/security_filters | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/security_filters | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/configuration/security_filters | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/security_filters | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/security_filters | ## [Get a security filter →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-security-filter.md){% #get-a-security-filter %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | ## [Update a security filter →](https://docs.datadoghq.com/api/latest/security-monitoring/update-a-security-filter.md){% #update-a-security-filter %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------------------ | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | ## [Delete a security filter →](https://docs.datadoghq.com/api/latest/security-monitoring/delete-a-security-filter.md){% #delete-a-security-filter %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/{security_filter_id} | ## [Get the version history of security filters →](https://docs.datadoghq.com/api/latest/security-monitoring/get-the-version-history-of-security-filters.md){% #get-the-version-history-of-security-filters %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/versions | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/versions | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/configuration/security_filters/versions | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/configuration/security_filters/versions | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/security_filters/versions | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/versions | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/versions | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/versions | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/security_filters/versions | ## [List entity context sync configurations →](https://docs.datadoghq.com/api/latest/security-monitoring/list-entity-context-sync-configurations.md) preview{% #list-entity-context-sync-configurations %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/integration_config | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/configuration/integration_config | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/configuration/integration_config | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/integration_config | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/integration_config | ## [Create an entity context sync configuration →](https://docs.datadoghq.com/api/latest/security-monitoring/create-an-entity-context-sync-configuration.md) preview{% #create-an-entity-context-sync-configuration %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/integration_config | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/configuration/integration_config | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/configuration/integration_config | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/integration_config | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/integration_config | ## [Get an entity context sync configuration →](https://docs.datadoghq.com/api/latest/security-monitoring/get-an-entity-context-sync-configuration.md) preview{% #get-an-entity-context-sync-configuration %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | ## [Update an entity context sync configuration →](https://docs.datadoghq.com/api/latest/security-monitoring/update-an-entity-context-sync-configuration.md) preview{% #update-an-entity-context-sync-configuration %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | ## [Delete an entity context sync configuration →](https://docs.datadoghq.com/api/latest/security-monitoring/delete-an-entity-context-sync-configuration.md) preview{% #delete-an-entity-context-sync-configuration %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------------------------ | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id} | ## [Validate entity context sync credentials →](https://docs.datadoghq.com/api/latest/security-monitoring/validate-entity-context-sync-credentials.md) preview{% #validate-entity-context-sync-credentials %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/validate | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/validate | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/configuration/integration_config/validate | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config/validate | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config/validate | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/validate | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/validate | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/validate | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/validate | ## [Validate an entity context sync configuration →](https://docs.datadoghq.com/api/latest/security-monitoring/validate-an-entity-context-sync-configuration.md) preview{% #validate-an-entity-context-sync-configuration %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id}/validate | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id}/validate | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/configuration/integration_config/{integration_config_id}/validate | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id}/validate | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id}/validate | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id}/validate | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id}/validate | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id}/validate | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_config_id}/validate | ## [Get all suppression rules →](https://docs.datadoghq.com/api/latest/security-monitoring/get-all-suppression-rules.md){% #get-all-suppression-rules %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/suppressions | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/configuration/suppressions | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/suppressions | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/suppressions | ## [Create a suppression rule →](https://docs.datadoghq.com/api/latest/security-monitoring/create-a-suppression-rule.md){% #create-a-suppression-rule %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/suppressions | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/configuration/suppressions | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/suppressions | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/suppressions | ## [Get a suppression rule →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-suppression-rule.md){% #get-a-suppression-rule %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | ## [Update a suppression rule →](https://docs.datadoghq.com/api/latest/security-monitoring/update-a-suppression-rule.md){% #update-a-suppression-rule %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | ## [Delete a suppression rule →](https://docs.datadoghq.com/api/latest/security-monitoring/delete-a-suppression-rule.md){% #delete-a-suppression-rule %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id} | ## [Validate a suppression rule →](https://docs.datadoghq.com/api/latest/security-monitoring/validate-a-suppression-rule.md){% #validate-a-suppression-rule %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/validation | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/validation | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/configuration/suppressions/validation | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions/validation | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions/validation | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/validation | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/validation | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/validation | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/validation | ## [Get suppressions affecting future rule →](https://docs.datadoghq.com/api/latest/security-monitoring/get-suppressions-affecting-future-rule.md){% #get-suppressions-affecting-future-rule %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/rules | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/rules | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/configuration/suppressions/rules | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions/rules | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions/rules | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/rules | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/rules | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/rules | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/rules | ## [Get suppressions affecting a specific rule →](https://docs.datadoghq.com/api/latest/security-monitoring/get-suppressions-affecting-a-specific-rule.md){% #get-suppressions-affecting-a-specific-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/rules/{rule_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/rules/{rule_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/configuration/suppressions/rules/{rule_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions/rules/{rule_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions/rules/{rule_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/rules/{rule_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/rules/{rule_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/rules/{rule_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/rules/{rule_id} | ## [Get a suppression's version history →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-suppressions-version-history.md){% #get-a-suppressions-version-history %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------------------------ | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id}/version_history | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id}/version_history | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/configuration/suppressions/{suppression_id}/version_history | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id}/version_history | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id}/version_history | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id}/version_history | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id}/version_history | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id}/version_history | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/suppressions/{suppression_id}/version_history | ## [Get all critical assets →](https://docs.datadoghq.com/api/latest/security-monitoring/get-all-critical-assets.md){% #get-all-critical-assets %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------ | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/configuration/critical_assets | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/configuration/critical_assets | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/critical_assets | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets | ## [Create a critical asset →](https://docs.datadoghq.com/api/latest/security-monitoring/create-a-critical-asset.md){% #create-a-critical-asset %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/configuration/critical_assets | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/configuration/critical_assets | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/critical_assets | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets | ## [Get a critical asset →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-critical-asset.md){% #get-a-critical-asset %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | ## [Update a critical asset →](https://docs.datadoghq.com/api/latest/security-monitoring/update-a-critical-asset.md){% #update-a-critical-asset %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | ## [Delete a critical asset →](https://docs.datadoghq.com/api/latest/security-monitoring/delete-a-critical-asset.md){% #delete-a-critical-asset %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/{critical_asset_id} | ## [Get critical assets affecting a specific rule →](https://docs.datadoghq.com/api/latest/security-monitoring/get-critical-assets-affecting-a-specific-rule.md){% #get-critical-assets-affecting-a-specific-rule %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/rules/{rule_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/rules/{rule_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/configuration/critical_assets/rules/{rule_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/configuration/critical_assets/rules/{rule_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/critical_assets/rules/{rule_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/rules/{rule_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/rules/{rule_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/rules/{rule_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/critical_assets/rules/{rule_id} | ## [Get content pack states →](https://docs.datadoghq.com/api/latest/security-monitoring/get-content-pack-states.md) preview{% #get-content-pack-states %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/content_packs/states | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/content_packs/states | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/content_packs/states | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/content_packs/states | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/content_packs/states | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/content_packs/states | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/content_packs/states | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/content_packs/states | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/content_packs/states | ## [Activate content pack →](https://docs.datadoghq.com/api/latest/security-monitoring/activate-content-pack.md) preview{% #activate-content-pack %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | PUT https://api.ap1.datadoghq.com/api/v2/security_monitoring/content_packs/{content_pack_id}/activate | | ap2.datadoghq.com | PUT https://api.ap2.datadoghq.com/api/v2/security_monitoring/content_packs/{content_pack_id}/activate | | app.datadoghq.eu | PUT https://api.datadoghq.eu/api/v2/security_monitoring/content_packs/{content_pack_id}/activate | | app.ddog-gov.com | PUT https://api.ddog-gov.com/api/v2/security_monitoring/content_packs/{content_pack_id}/activate | | us2.ddog-gov.com | PUT https://api.us2.ddog-gov.com/api/v2/security_monitoring/content_packs/{content_pack_id}/activate | | uk1.datadoghq.com | PUT https://api.uk1.datadoghq.com/api/v2/security_monitoring/content_packs/{content_pack_id}/activate | | app.datadoghq.com | PUT https://api.datadoghq.com/api/v2/security_monitoring/content_packs/{content_pack_id}/activate | | us3.datadoghq.com | PUT https://api.us3.datadoghq.com/api/v2/security_monitoring/content_packs/{content_pack_id}/activate | | us5.datadoghq.com | PUT https://api.us5.datadoghq.com/api/v2/security_monitoring/content_packs/{content_pack_id}/activate | ## [Deactivate content pack →](https://docs.datadoghq.com/api/latest/security-monitoring/deactivate-content-pack.md) preview{% #deactivate-content-pack %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | PUT https://api.ap1.datadoghq.com/api/v2/security_monitoring/content_packs/{content_pack_id}/deactivate | | ap2.datadoghq.com | PUT https://api.ap2.datadoghq.com/api/v2/security_monitoring/content_packs/{content_pack_id}/deactivate | | app.datadoghq.eu | PUT https://api.datadoghq.eu/api/v2/security_monitoring/content_packs/{content_pack_id}/deactivate | | app.ddog-gov.com | PUT https://api.ddog-gov.com/api/v2/security_monitoring/content_packs/{content_pack_id}/deactivate | | us2.ddog-gov.com | PUT https://api.us2.ddog-gov.com/api/v2/security_monitoring/content_packs/{content_pack_id}/deactivate | | uk1.datadoghq.com | PUT https://api.uk1.datadoghq.com/api/v2/security_monitoring/content_packs/{content_pack_id}/deactivate | | app.datadoghq.com | PUT https://api.datadoghq.com/api/v2/security_monitoring/content_packs/{content_pack_id}/deactivate | | us3.datadoghq.com | PUT https://api.us3.datadoghq.com/api/v2/security_monitoring/content_packs/{content_pack_id}/deactivate | | us5.datadoghq.com | PUT https://api.us5.datadoghq.com/api/v2/security_monitoring/content_packs/{content_pack_id}/deactivate | ## [List datasets →](https://docs.datadoghq.com/api/latest/security-monitoring/list-datasets.md) preview{% #list-datasets %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/datasets | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/datasets | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/datasets | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/datasets | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/datasets | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/datasets | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/datasets | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/datasets | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/datasets | ## [Create a dataset →](https://docs.datadoghq.com/api/latest/security-monitoring/create-a-dataset.md) preview{% #create-a-dataset %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/datasets | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/datasets | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/datasets | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/datasets | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/datasets | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/datasets | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/datasets | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/datasets | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/datasets | ## [Get dataset dependencies →](https://docs.datadoghq.com/api/latest/security-monitoring/get-dataset-dependencies.md) preview{% #get-dataset-dependencies %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/datasets/dependencies | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/datasets/dependencies | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/datasets/dependencies | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/datasets/dependencies | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/datasets/dependencies | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/datasets/dependencies | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/datasets/dependencies | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/datasets/dependencies | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/datasets/dependencies | ## [Get a dataset →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-dataset.md) preview{% #get-a-dataset %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/datasets/{dataset_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/datasets/{dataset_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/datasets/{dataset_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | ## [Update a dataset →](https://docs.datadoghq.com/api/latest/security-monitoring/update-a-dataset.md) preview{% #update-a-dataset %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------ | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security_monitoring/datasets/{dataset_id} | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security_monitoring/datasets/{dataset_id} | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security_monitoring/datasets/{dataset_id} | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | ## [Delete a dataset →](https://docs.datadoghq.com/api/latest/security-monitoring/delete-a-dataset.md) preview{% #delete-a-dataset %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------- | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/security_monitoring/datasets/{dataset_id} | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/security_monitoring/datasets/{dataset_id} | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/security_monitoring/datasets/{dataset_id} | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id} | ## [Get a dataset at a specific version →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-dataset-at-a-specific-version.md) preview{% #get-a-dataset-at-a-specific-version %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id}/version/{version} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id}/version/{version} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/datasets/{dataset_id}/version/{version} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/datasets/{dataset_id}/version/{version} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/datasets/{dataset_id}/version/{version} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id}/version/{version} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id}/version/{version} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id}/version/{version} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id}/version/{version} | ## [Get the version history of a dataset →](https://docs.datadoghq.com/api/latest/security-monitoring/get-the-version-history-of-a-dataset.md) preview{% #get-the-version-history-of-a-dataset %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id}/version_history | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id}/version_history | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/datasets/{dataset_id}/version_history | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/datasets/{dataset_id}/version_history | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/datasets/{dataset_id}/version_history | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id}/version_history | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id}/version_history | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id}/version_history | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/datasets/{dataset_id}/version_history | ## [Get entity context →](https://docs.datadoghq.com/api/latest/security-monitoring/get-entity-context.md) preview{% #get-entity-context %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/entity_context | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/entity_context | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/entity_context | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/entity_context | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/entity_context | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/entity_context | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/entity_context | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/entity_context | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/entity_context | ## [List indicators of compromise →](https://docs.datadoghq.com/api/latest/security-monitoring/list-indicators-of-compromise.md) preview{% #list-indicators-of-compromise %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/siem/ioc-explorer | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/siem/ioc-explorer | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/siem/ioc-explorer | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/siem/ioc-explorer | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/siem/ioc-explorer | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/siem/ioc-explorer | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/siem/ioc-explorer | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/siem/ioc-explorer | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/siem/ioc-explorer | ## [Get an indicator of compromise →](https://docs.datadoghq.com/api/latest/security-monitoring/get-an-indicator-of-compromise.md) preview{% #get-an-indicator-of-compromise %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/siem/ioc-explorer/indicator | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/siem/ioc-explorer/indicator | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/siem/ioc-explorer/indicator | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/siem/ioc-explorer/indicator | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/siem/ioc-explorer/indicator | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/siem/ioc-explorer/indicator | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/siem/ioc-explorer/indicator | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/siem/ioc-explorer/indicator | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/siem/ioc-explorer/indicator | ## [Create or update an indicator triage state →](https://docs.datadoghq.com/api/latest/security-monitoring/create-or-update-an-indicator-triage-state.md) preview{% #create-or-update-an-indicator-triage-state %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/siem/ioc-explorer/triage | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/siem/ioc-explorer/triage | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/siem/ioc-explorer/triage | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/siem/ioc-explorer/triage | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/siem/ioc-explorer/triage | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/siem/ioc-explorer/triage | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/siem/ioc-explorer/triage | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/siem/ioc-explorer/triage | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/siem/ioc-explorer/triage | ## [List rules →](https://docs.datadoghq.com/api/latest/security-monitoring/list-rules.md){% #list-rules %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------ | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/rules | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/rules | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/rules | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/rules | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/rules | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/rules | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/rules | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/rules | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/rules | ## [Create a detection rule →](https://docs.datadoghq.com/api/latest/security-monitoring/create-a-detection-rule.md){% #create-a-detection-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/rules | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/rules | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/rules | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/rules | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/rules | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/rules | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/rules | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/rules | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/rules | ## [Get a rule's details →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-rules-details.md){% #get-a-rules-details %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/rules/{rule_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/rules/{rule_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/rules/{rule_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | ## [Update an existing rule →](https://docs.datadoghq.com/api/latest/security-monitoring/update-an-existing-rule.md){% #update-an-existing-rule %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------- | | ap1.datadoghq.com | PUT https://api.ap1.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | | ap2.datadoghq.com | PUT https://api.ap2.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | | app.datadoghq.eu | PUT https://api.datadoghq.eu/api/v2/security_monitoring/rules/{rule_id} | | app.ddog-gov.com | PUT https://api.ddog-gov.com/api/v2/security_monitoring/rules/{rule_id} | | us2.ddog-gov.com | PUT https://api.us2.ddog-gov.com/api/v2/security_monitoring/rules/{rule_id} | | uk1.datadoghq.com | PUT https://api.uk1.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | | app.datadoghq.com | PUT https://api.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | | us3.datadoghq.com | PUT https://api.us3.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | | us5.datadoghq.com | PUT https://api.us5.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | ## [Delete an existing rule →](https://docs.datadoghq.com/api/latest/security-monitoring/delete-an-existing-rule.md){% #delete-an-existing-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------- | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/security_monitoring/rules/{rule_id} | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/security_monitoring/rules/{rule_id} | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/security_monitoring/rules/{rule_id} | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/security_monitoring/rules/{rule_id} | ## [Test an existing rule →](https://docs.datadoghq.com/api/latest/security-monitoring/test-an-existing-rule.md){% #test-an-existing-rule %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/test | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/test | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/rules/{rule_id}/test | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/rules/{rule_id}/test | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/rules/{rule_id}/test | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/test | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/test | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/test | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/test | ## [Test a rule →](https://docs.datadoghq.com/api/latest/security-monitoring/test-a-rule.md){% #test-a-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------ | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/rules/test | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/rules/test | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/rules/test | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/rules/test | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/rules/test | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/rules/test | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/rules/test | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/rules/test | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/rules/test | ## [Validate a detection rule →](https://docs.datadoghq.com/api/latest/security-monitoring/validate-a-detection-rule.md){% #validate-a-detection-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------ | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/rules/validation | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/rules/validation | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/rules/validation | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/rules/validation | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/rules/validation | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/rules/validation | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/rules/validation | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/rules/validation | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/rules/validation | ## [Convert an existing rule from JSON to Terraform →](https://docs.datadoghq.com/api/latest/security-monitoring/convert-an-existing-rule-from-json-to-terraform.md){% #convert-an-existing-rule-from-json-to-terraform %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------ | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/convert | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/convert | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/rules/{rule_id}/convert | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/rules/{rule_id}/convert | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/rules/{rule_id}/convert | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/convert | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/convert | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/convert | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/convert | ## [Convert a rule from JSON to Terraform →](https://docs.datadoghq.com/api/latest/security-monitoring/convert-a-rule-from-json-to-terraform.md){% #convert-a-rule-from-json-to-terraform %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/rules/convert | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/rules/convert | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/rules/convert | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/rules/convert | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/rules/convert | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/rules/convert | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/rules/convert | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/rules/convert | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/rules/convert | ## [Bulk convert rules to Terraform →](https://docs.datadoghq.com/api/latest/security-monitoring/bulk-convert-rules-to-terraform.md){% #bulk-convert-rules-to-terraform %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/rules/convert/bulk | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/rules/convert/bulk | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/rules/convert/bulk | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/rules/convert/bulk | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/rules/convert/bulk | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/rules/convert/bulk | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/rules/convert/bulk | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/rules/convert/bulk | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/rules/convert/bulk | ## [Bulk export security monitoring rules →](https://docs.datadoghq.com/api/latest/security-monitoring/bulk-export-security-monitoring-rules.md){% #bulk-export-security-monitoring-rules %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/rules/bulk_export | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/rules/bulk_export | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/rules/bulk_export | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/rules/bulk_export | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/rules/bulk_export | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/rules/bulk_export | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/rules/bulk_export | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/rules/bulk_export | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/rules/bulk_export | ## [Bulk delete security monitoring rules →](https://docs.datadoghq.com/api/latest/security-monitoring/bulk-delete-security-monitoring-rules.md){% #bulk-delete-security-monitoring-rules %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------- | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/security_monitoring/rules/bulk_delete | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/security_monitoring/rules/bulk_delete | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/security_monitoring/rules/bulk_delete | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/security_monitoring/rules/bulk_delete | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/security_monitoring/rules/bulk_delete | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/security_monitoring/rules/bulk_delete | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/security_monitoring/rules/bulk_delete | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/security_monitoring/rules/bulk_delete | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/security_monitoring/rules/bulk_delete | ## [Get a rule's version history →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-rules-version-history.md) preview{% #get-a-rules-version-history %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/version_history | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/version_history | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/rules/{rule_id}/version_history | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/rules/{rule_id}/version_history | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/rules/{rule_id}/version_history | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/version_history | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/version_history | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/version_history | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/version_history | ## [Get sample log generation subscriptions →](https://docs.datadoghq.com/api/latest/security-monitoring/get-sample-log-generation-subscriptions.md) preview{% #get-sample-log-generation-subscriptions %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------ | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/sample_log_generation/subscriptions | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/sample_log_generation/subscriptions | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/sample_log_generation/subscriptions | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions | ## [Subscribe to sample log generation →](https://docs.datadoghq.com/api/latest/security-monitoring/subscribe-to-sample-log-generation.md) preview{% #subscribe-to-sample-log-generation %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/sample_log_generation/subscriptions | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/sample_log_generation/subscriptions | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/sample_log_generation/subscriptions | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions | ## [Bulk subscribe to sample log generation →](https://docs.datadoghq.com/api/latest/security-monitoring/bulk-subscribe-to-sample-log-generation.md) preview{% #bulk-subscribe-to-sample-log-generation %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------ | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/bulk | ## [Unsubscribe from sample log generation →](https://docs.datadoghq.com/api/latest/security-monitoring/unsubscribe-from-sample-log-generation.md) preview{% #unsubscribe-from-sample-log-generation %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/{content_pack_id} | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/{content_pack_id} | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/security_monitoring/sample_log_generation/subscriptions/{content_pack_id} | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/security_monitoring/sample_log_generation/subscriptions/{content_pack_id} | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/security_monitoring/sample_log_generation/subscriptions/{content_pack_id} | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/{content_pack_id} | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/{content_pack_id} | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/{content_pack_id} | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/security_monitoring/sample_log_generation/subscriptions/{content_pack_id} | ## [Run a historical job →](https://docs.datadoghq.com/api/latest/security-monitoring/run-a-historical-job.md) preview{% #run-a-historical-job %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/siem-historical-detections/jobs | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/siem-historical-detections/jobs | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/siem-historical-detections/jobs | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/siem-historical-detections/jobs | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/siem-historical-detections/jobs | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/siem-historical-detections/jobs | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/siem-historical-detections/jobs | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/siem-historical-detections/jobs | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/siem-historical-detections/jobs | ## [List historical jobs →](https://docs.datadoghq.com/api/latest/security-monitoring/list-historical-jobs.md) preview{% #list-historical-jobs %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------ | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/siem-historical-detections/jobs | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/siem-historical-detections/jobs | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/siem-historical-detections/jobs | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/siem-historical-detections/jobs | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/siem-historical-detections/jobs | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/siem-historical-detections/jobs | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/siem-historical-detections/jobs | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/siem-historical-detections/jobs | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/siem-historical-detections/jobs | ## [Get a job's details →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-jobs-details.md) preview{% #get-a-jobs-details %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/siem-historical-detections/jobs/{job_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/siem-historical-detections/jobs/{job_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/siem-historical-detections/jobs/{job_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id} | ## [Delete an existing job →](https://docs.datadoghq.com/api/latest/security-monitoring/delete-an-existing-job.md) preview{% #delete-an-existing-job %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------ | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id} | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id} | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/siem-historical-detections/jobs/{job_id} | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/siem-historical-detections/jobs/{job_id} | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/siem-historical-detections/jobs/{job_id} | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id} | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id} | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id} | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id} | ## [Cancel a historical job →](https://docs.datadoghq.com/api/latest/security-monitoring/cancel-a-historical-job.md) preview{% #cancel-a-historical-job %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------ | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/cancel | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/cancel | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/siem-historical-detections/jobs/{job_id}/cancel | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/siem-historical-detections/jobs/{job_id}/cancel | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/siem-historical-detections/jobs/{job_id}/cancel | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/cancel | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/cancel | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/cancel | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/cancel | ## [Convert a job result to a signal →](https://docs.datadoghq.com/api/latest/security-monitoring/convert-a-job-result-to-a-signal.md) preview{% #convert-a-job-result-to-a-signal %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/siem-historical-detections/jobs/signal_convert | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/siem-historical-detections/jobs/signal_convert | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/siem-historical-detections/jobs/signal_convert | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/siem-historical-detections/jobs/signal_convert | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/siem-historical-detections/jobs/signal_convert | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/siem-historical-detections/jobs/signal_convert | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/siem-historical-detections/jobs/signal_convert | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/siem-historical-detections/jobs/signal_convert | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/siem-historical-detections/jobs/signal_convert | ## [Get a job's hist signals →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-jobs-hist-signals.md) preview{% #get-a-jobs-hist-signals %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/histsignals | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/histsignals | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/siem-historical-detections/jobs/{job_id}/histsignals | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/siem-historical-detections/jobs/{job_id}/histsignals | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/siem-historical-detections/jobs/{job_id}/histsignals | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/histsignals | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/histsignals | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/histsignals | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/histsignals | ## [List hist signals →](https://docs.datadoghq.com/api/latest/security-monitoring/list-hist-signals.md) preview{% #list-hist-signals %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/siem-historical-detections/histsignals | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/siem-historical-detections/histsignals | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/siem-historical-detections/histsignals | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/siem-historical-detections/histsignals | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/siem-historical-detections/histsignals | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/siem-historical-detections/histsignals | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/siem-historical-detections/histsignals | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/siem-historical-detections/histsignals | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/siem-historical-detections/histsignals | ## [Get a hist signal's details →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-hist-signals-details.md) preview{% #get-a-hist-signals-details %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/siem-historical-detections/histsignals/{histsignal_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/siem-historical-detections/histsignals/{histsignal_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/siem-historical-detections/histsignals/{histsignal_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/siem-historical-detections/histsignals/{histsignal_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/siem-historical-detections/histsignals/{histsignal_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/siem-historical-detections/histsignals/{histsignal_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/siem-historical-detections/histsignals/{histsignal_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/siem-historical-detections/histsignals/{histsignal_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/siem-historical-detections/histsignals/{histsignal_id} | ## [Search hist signals →](https://docs.datadoghq.com/api/latest/security-monitoring/search-hist-signals.md) preview{% #search-hist-signals %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/siem-historical-detections/histsignals/search | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/siem-historical-detections/histsignals/search | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/siem-historical-detections/histsignals/search | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/siem-historical-detections/histsignals/search | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/siem-historical-detections/histsignals/search | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/siem-historical-detections/histsignals/search | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/siem-historical-detections/histsignals/search | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/siem-historical-detections/histsignals/search | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/siem-historical-detections/histsignals/search | ## [Get a list of security signals →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-list-of-security-signals.md){% #get-a-list-of-security-signals %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/signals/search | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/signals/search | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/signals/search | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/signals/search | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/signals/search | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/signals/search | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/signals/search | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/signals/search | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/signals/search | ## [Get a quick list of security signals →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-quick-list-of-security-signals.md){% #get-a-quick-list-of-security-signals %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/signals | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/signals | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/signals | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/signals | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/signals | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/signals | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/signals | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/signals | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/signals | ## [Get a signal's details →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-signals-details.md){% #get-a-signals-details %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/signals/{signal_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/signals/{signal_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/signals/{signal_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/signals/{signal_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/signals/{signal_id} | ## [Change the related incidents of a security signal →](https://docs.datadoghq.com/api/latest/security-monitoring/change-the-related-incidents-of-a-security-signal.md){% #change-the-related-incidents-of-a-security-signal %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/incidents | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/incidents | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security_monitoring/signals/{signal_id}/incidents | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id}/incidents | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id}/incidents | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/incidents | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/incidents | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/incidents | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/incidents | ## [Bulk update triage state of security signals →](https://docs.datadoghq.com/api/latest/security-monitoring/bulk-update-triage-state-of-security-signals.md){% #bulk-update-triage-state-of-security-signals %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security_monitoring/signals/bulk/state | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security_monitoring/signals/bulk/state | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security_monitoring/signals/bulk/state | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security_monitoring/signals/bulk/state | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security_monitoring/signals/bulk/state | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security_monitoring/signals/bulk/state | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security_monitoring/signals/bulk/state | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security_monitoring/signals/bulk/state | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security_monitoring/signals/bulk/state | ## [Bulk update triage assignee of security signals →](https://docs.datadoghq.com/api/latest/security-monitoring/bulk-update-triage-assignee-of-security-signals.md){% #bulk-update-triage-assignee-of-security-signals %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------ | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security_monitoring/signals/bulk/assignee | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security_monitoring/signals/bulk/assignee | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security_monitoring/signals/bulk/assignee | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security_monitoring/signals/bulk/assignee | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security_monitoring/signals/bulk/assignee | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security_monitoring/signals/bulk/assignee | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security_monitoring/signals/bulk/assignee | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security_monitoring/signals/bulk/assignee | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security_monitoring/signals/bulk/assignee | ## [Bulk update security signals →](https://docs.datadoghq.com/api/latest/security-monitoring/bulk-update-security-signals.md){% #bulk-update-security-signals %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security_monitoring/signals/bulk/update | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security_monitoring/signals/bulk/update | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security_monitoring/signals/bulk/update | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security_monitoring/signals/bulk/update | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security_monitoring/signals/bulk/update | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security_monitoring/signals/bulk/update | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security_monitoring/signals/bulk/update | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security_monitoring/signals/bulk/update | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security_monitoring/signals/bulk/update | ## [Update security signal triage state or assignee →](https://docs.datadoghq.com/api/latest/security-monitoring/update-security-signal-triage-state-or-assignee.md){% #update-security-signal-triage-state-or-assignee %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/update | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/update | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security_monitoring/signals/{signal_id}/update | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id}/update | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id}/update | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/update | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/update | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/update | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/update | ## [Get investigation queries for a signal →](https://docs.datadoghq.com/api/latest/security-monitoring/get-investigation-queries-for-a-signal.md){% #get-investigation-queries-for-a-signal %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------ | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/investigation_queries | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/investigation_queries | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/signals/{signal_id}/investigation_queries | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id}/investigation_queries | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id}/investigation_queries | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/investigation_queries | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/investigation_queries | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/investigation_queries | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/investigation_queries | ## [Get suggested actions for a signal →](https://docs.datadoghq.com/api/latest/security-monitoring/get-suggested-actions-for-a-signal.md){% #get-suggested-actions-for-a-signal %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/suggested_actions | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/suggested_actions | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/signals/{signal_id}/suggested_actions | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id}/suggested_actions | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id}/suggested_actions | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/suggested_actions | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/suggested_actions | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/suggested_actions | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/suggested_actions | ## [Get entities related to a signal →](https://docs.datadoghq.com/api/latest/security-monitoring/get-entities-related-to-a-signal.md) preview{% #get-entities-related-to-a-signal %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/entities | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/entities | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/signals/{signal_id}/entities | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id}/entities | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/signals/{signal_id}/entities | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/entities | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/entities | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/entities | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/entities | ## [Export security monitoring resource to Terraform →](https://docs.datadoghq.com/api/latest/security-monitoring/export-security-monitoring-resource-to-terraform.md) preview{% #export-security-monitoring-resource-to-terraform %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/{resource_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/{resource_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/terraform/{resource_type}/{resource_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/terraform/{resource_type}/{resource_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/terraform/{resource_type}/{resource_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/{resource_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/{resource_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/{resource_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/{resource_id} | ## [Export security monitoring resources to Terraform →](https://docs.datadoghq.com/api/latest/security-monitoring/export-security-monitoring-resources-to-terraform.md) preview{% #export-security-monitoring-resources-to-terraform %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/bulk | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/bulk | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/terraform/{resource_type}/bulk | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/terraform/{resource_type}/bulk | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/terraform/{resource_type}/bulk | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/bulk | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/bulk | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/bulk | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/bulk | ## [Convert security monitoring resource to Terraform →](https://docs.datadoghq.com/api/latest/security-monitoring/convert-security-monitoring-resource-to-terraform.md) preview{% #convert-security-monitoring-resource-to-terraform %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/convert | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/convert | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/terraform/{resource_type}/convert | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/terraform/{resource_type}/convert | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/terraform/{resource_type}/convert | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/convert | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/convert | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/convert | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/terraform/{resource_type}/convert | ## [Returns a list of Secrets rules →](https://docs.datadoghq.com/api/latest/security-monitoring/returns-a-list-of-secrets-rules.md) preview{% #returns-a-list-of-secrets-rules %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/static-analysis/secrets/rules | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/static-analysis/secrets/rules | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/static-analysis/secrets/rules | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/static-analysis/secrets/rules | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/static-analysis/secrets/rules | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/static-analysis/secrets/rules | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/static-analysis/secrets/rules | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/static-analysis/secrets/rules | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/static-analysis/secrets/rules | ## [Ruleset get multiple →](https://docs.datadoghq.com/api/latest/security-monitoring/ruleset-get-multiple.md) preview{% #ruleset-get-multiple %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------ | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/static-analysis/rulesets | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/static-analysis/rulesets | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/static-analysis/rulesets | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/static-analysis/rulesets | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/static-analysis/rulesets | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/static-analysis/rulesets | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/static-analysis/rulesets | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/static-analysis/rulesets | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/static-analysis/rulesets | ## [Get a SAST ruleset →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-sast-ruleset.md) preview{% #get-a-sast-ruleset %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/static-analysis/rulesets/{ruleset_name} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/static-analysis/rulesets/{ruleset_name} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/static-analysis/rulesets/{ruleset_name} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/static-analysis/rulesets/{ruleset_name} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/static-analysis/rulesets/{ruleset_name} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/static-analysis/rulesets/{ruleset_name} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/static-analysis/rulesets/{ruleset_name} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/static-analysis/rulesets/{ruleset_name} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/static-analysis/rulesets/{ruleset_name} | ## [List codegen rulesets →](https://docs.datadoghq.com/api/latest/security-monitoring/list-codegen-rulesets.md) preview{% #list-codegen-rulesets %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/static-analysis/codegen/rulesets | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/static-analysis/codegen/rulesets | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/static-analysis/codegen/rulesets | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/static-analysis/codegen/rulesets | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/static-analysis/codegen/rulesets | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/static-analysis/codegen/rulesets | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/static-analysis/codegen/rulesets | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/static-analysis/codegen/rulesets | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/static-analysis/codegen/rulesets | ## [Get default rulesets for a language →](https://docs.datadoghq.com/api/latest/security-monitoring/get-default-rulesets-for-a-language.md) preview{% #get-default-rulesets-for-a-language %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------ | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/static-analysis/default-rulesets/{language} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/static-analysis/default-rulesets/{language} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/static-analysis/default-rulesets/{language} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/static-analysis/default-rulesets/{language} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/static-analysis/default-rulesets/{language} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/static-analysis/default-rulesets/{language} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/static-analysis/default-rulesets/{language} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/static-analysis/default-rulesets/{language} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/static-analysis/default-rulesets/{language} | ## [Analyze code →](https://docs.datadoghq.com/api/latest/security-monitoring/analyze-code.md) preview{% #analyze-code %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/static-analysis/static-analysis-server/analyze | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/static-analysis/static-analysis-server/analyze | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/static-analysis/static-analysis-server/analyze | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/static-analysis/static-analysis-server/analyze | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/static-analysis/static-analysis-server/analyze | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/static-analysis/static-analysis-server/analyze | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/static-analysis/static-analysis-server/analyze | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/static-analysis/static-analysis-server/analyze | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/static-analysis/static-analysis-server/analyze | ## [Get AST for source code →](https://docs.datadoghq.com/api/latest/security-monitoring/get-ast-for-source-code.md) preview{% #get-ast-for-source-code %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/static-analysis/static-analysis-server/get-ast | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/static-analysis/static-analysis-server/get-ast | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/static-analysis/static-analysis-server/get-ast | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/static-analysis/static-analysis-server/get-ast | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/static-analysis/static-analysis-server/get-ast | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/static-analysis/static-analysis-server/get-ast | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/static-analysis/static-analysis-server/get-ast | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/static-analysis/static-analysis-server/get-ast | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/static-analysis/static-analysis-server/get-ast | ## [Get tree-sitter WASM file →](https://docs.datadoghq.com/api/latest/security-monitoring/get-tree-sitter-wasm-file.md) preview{% #get-tree-sitter-wasm-file %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/static-analysis/static-analysis-server/tree-sitter-wasm/{file} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/static-analysis/static-analysis-server/tree-sitter-wasm/{file} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/static-analysis/static-analysis-server/tree-sitter-wasm/{file} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/static-analysis/static-analysis-server/tree-sitter-wasm/{file} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/static-analysis/static-analysis-server/tree-sitter-wasm/{file} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/static-analysis/static-analysis-server/tree-sitter-wasm/{file} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/static-analysis/static-analysis-server/tree-sitter-wasm/{file} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/static-analysis/static-analysis-server/tree-sitter-wasm/{file} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/static-analysis/static-analysis-server/tree-sitter-wasm/{file} | ## [Get node types for a language →](https://docs.datadoghq.com/api/latest/security-monitoring/get-node-types-for-a-language.md) preview{% #get-node-types-for-a-language %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/static-analysis/static-analysis-server/node-types/{language} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/static-analysis/static-analysis-server/node-types/{language} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/static-analysis/static-analysis-server/node-types/{language} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/static-analysis/static-analysis-server/node-types/{language} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/static-analysis/static-analysis-server/node-types/{language} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/static-analysis/static-analysis-server/node-types/{language} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/static-analysis/static-analysis-server/node-types/{language} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/static-analysis/static-analysis-server/node-types/{language} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/static-analysis/static-analysis-server/node-types/{language} | ## [List vulnerabilities →](https://docs.datadoghq.com/api/latest/security-monitoring/list-vulnerabilities.md) deprecated preview{% #list-vulnerabilities %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/vulnerabilities | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/vulnerabilities | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/vulnerabilities | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/vulnerabilities | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/vulnerabilities | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/vulnerabilities | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/vulnerabilities | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/vulnerabilities | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/vulnerabilities | ## [List vulnerable assets →](https://docs.datadoghq.com/api/latest/security-monitoring/list-vulnerable-assets.md) preview{% #list-vulnerable-assets %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/vulnerable-assets | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/vulnerable-assets | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/vulnerable-assets | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/vulnerable-assets | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/vulnerable-assets | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/vulnerable-assets | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/vulnerable-assets | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/vulnerable-assets | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/vulnerable-assets | ## [Get SBOM →](https://docs.datadoghq.com/api/latest/security-monitoring/get-sbom.md){% #get-sbom %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/sboms/{asset_type} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/sboms/{asset_type} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/sboms/{asset_type} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/sboms/{asset_type} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/sboms/{asset_type} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/sboms/{asset_type} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/sboms/{asset_type} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/sboms/{asset_type} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/sboms/{asset_type} | ## [List assets SBOMs →](https://docs.datadoghq.com/api/latest/security-monitoring/list-assets-sboms.md){% #list-assets-sboms %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/sboms | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/sboms | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/sboms | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/sboms | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/sboms | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/sboms | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/sboms | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/sboms | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/sboms | ## [Test a notification rule →](https://docs.datadoghq.com/api/latest/security-monitoring/test-a-notification-rule.md){% #test-a-notification-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------------------------ | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/notification_rules/send_notification_preview | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/notification_rules/send_notification_preview | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/configuration/notification_rules/send_notification_preview | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/configuration/notification_rules/send_notification_preview | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/notification_rules/send_notification_preview | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/notification_rules/send_notification_preview | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/configuration/notification_rules/send_notification_preview | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/notification_rules/send_notification_preview | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/notification_rules/send_notification_preview | ## [List scanned assets metadata →](https://docs.datadoghq.com/api/latest/security-monitoring/list-scanned-assets-metadata.md) preview{% #list-scanned-assets-metadata %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/scanned-assets-metadata | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/scanned-assets-metadata | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/scanned-assets-metadata | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/scanned-assets-metadata | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/scanned-assets-metadata | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/scanned-assets-metadata | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/scanned-assets-metadata | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/scanned-assets-metadata | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/scanned-assets-metadata | ## [Get a single entity context →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-single-entity-context.md) preview{% #get-a-single-entity-context %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/entity_context/{id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/entity_context/{id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/entity_context/{id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/entity_context/{id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/entity_context/{id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/entity_context/{id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/entity_context/{id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/entity_context/{id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/entity_context/{id} | ## [Restore a rule to a historical version →](https://docs.datadoghq.com/api/latest/security-monitoring/restore-a-rule-to-a-historical-version.md) preview{% #restore-a-rule-to-a-historical-version %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/restore/{version} | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/restore/{version} | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/rules/{rule_id}/restore/{version} | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/rules/{rule_id}/restore/{version} | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/rules/{rule_id}/restore/{version} | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/restore/{version} | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/restore/{version} | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/restore/{version} | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/rules/{rule_id}/restore/{version} | ## [Get all mute rules →](https://docs.datadoghq.com/api/latest/security-monitoring/get-all-mute-rules.md) preview{% #get-all-mute-rules %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/findings/automation/mute_rules | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/findings/automation/mute_rules | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/findings/automation/mute_rules | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/findings/automation/mute_rules | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/findings/automation/mute_rules | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/findings/automation/mute_rules | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/findings/automation/mute_rules | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/findings/automation/mute_rules | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/findings/automation/mute_rules | ## [Create a mute rule →](https://docs.datadoghq.com/api/latest/security-monitoring/create-a-mute-rule.md) preview{% #create-a-mute-rule %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/automation/mute_rules | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/automation/mute_rules | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/automation/mute_rules | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/automation/mute_rules | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/automation/mute_rules | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/automation/mute_rules | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/automation/mute_rules | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/automation/mute_rules | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/automation/mute_rules | ## [Reorder mute rules →](https://docs.datadoghq.com/api/latest/security-monitoring/reorder-mute-rules.md) preview{% #reorder-mute-rules %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/automation/mute_rules/reorder | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/automation/mute_rules/reorder | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/automation/mute_rules/reorder | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/automation/mute_rules/reorder | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/automation/mute_rules/reorder | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/automation/mute_rules/reorder | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/automation/mute_rules/reorder | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/automation/mute_rules/reorder | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/automation/mute_rules/reorder | ## [Get a mute rule →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-mute-rule.md) preview{% #get-a-mute-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------ | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/findings/automation/mute_rules/{rule_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | ## [Update a mute rule →](https://docs.datadoghq.com/api/latest/security-monitoring/update-a-mute-rule.md) preview{% #update-a-mute-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------ | | ap1.datadoghq.com | PUT https://api.ap1.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | ap2.datadoghq.com | PUT https://api.ap2.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | app.datadoghq.eu | PUT https://api.datadoghq.eu/api/v2/security/findings/automation/mute_rules/{rule_id} | | app.ddog-gov.com | PUT https://api.ddog-gov.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | us2.ddog-gov.com | PUT https://api.us2.ddog-gov.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | uk1.datadoghq.com | PUT https://api.uk1.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | app.datadoghq.com | PUT https://api.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | us3.datadoghq.com | PUT https://api.us3.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | us5.datadoghq.com | PUT https://api.us5.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | ## [Delete a mute rule →](https://docs.datadoghq.com/api/latest/security-monitoring/delete-a-mute-rule.md) preview{% #delete-a-mute-rule %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/security/findings/automation/mute_rules/{rule_id} | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/security/findings/automation/mute_rules/{rule_id} | ## [Get all due date rules →](https://docs.datadoghq.com/api/latest/security-monitoring/get-all-due-date-rules.md) preview{% #get-all-due-date-rules %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------ | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/findings/automation/due_date_rules | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/findings/automation/due_date_rules | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/findings/automation/due_date_rules | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/findings/automation/due_date_rules | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/findings/automation/due_date_rules | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/findings/automation/due_date_rules | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/findings/automation/due_date_rules | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/findings/automation/due_date_rules | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/findings/automation/due_date_rules | ## [Create a due date rule →](https://docs.datadoghq.com/api/latest/security-monitoring/create-a-due-date-rule.md) preview{% #create-a-due-date-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/automation/due_date_rules | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/automation/due_date_rules | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/automation/due_date_rules | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/automation/due_date_rules | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/automation/due_date_rules | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/automation/due_date_rules | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/automation/due_date_rules | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/automation/due_date_rules | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/automation/due_date_rules | ## [Reorder due date rules →](https://docs.datadoghq.com/api/latest/security-monitoring/reorder-due-date-rules.md) preview{% #reorder-due-date-rules %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/automation/due_date_rules/reorder | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/automation/due_date_rules/reorder | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/automation/due_date_rules/reorder | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/automation/due_date_rules/reorder | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/automation/due_date_rules/reorder | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/automation/due_date_rules/reorder | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/automation/due_date_rules/reorder | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/automation/due_date_rules/reorder | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/automation/due_date_rules/reorder | ## [Get a due date rule →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-due-date-rule.md) preview{% #get-a-due-date-rule %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/findings/automation/due_date_rules/{rule_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | ## [Update a due date rule →](https://docs.datadoghq.com/api/latest/security-monitoring/update-a-due-date-rule.md) preview{% #update-a-due-date-rule %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | PUT https://api.ap1.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | ap2.datadoghq.com | PUT https://api.ap2.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | app.datadoghq.eu | PUT https://api.datadoghq.eu/api/v2/security/findings/automation/due_date_rules/{rule_id} | | app.ddog-gov.com | PUT https://api.ddog-gov.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | us2.ddog-gov.com | PUT https://api.us2.ddog-gov.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | uk1.datadoghq.com | PUT https://api.uk1.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | app.datadoghq.com | PUT https://api.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | us3.datadoghq.com | PUT https://api.us3.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | us5.datadoghq.com | PUT https://api.us5.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | ## [Delete a due date rule →](https://docs.datadoghq.com/api/latest/security-monitoring/delete-a-due-date-rule.md) preview{% #delete-a-due-date-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/security/findings/automation/due_date_rules/{rule_id} | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/security/findings/automation/due_date_rules/{rule_id} | ## [Get all ticket creation rules →](https://docs.datadoghq.com/api/latest/security-monitoring/get-all-ticket-creation-rules.md) preview{% #get-all-ticket-creation-rules %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/findings/automation/ticket_creation_rules | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/findings/automation/ticket_creation_rules | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/findings/automation/ticket_creation_rules | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules | ## [Create a ticket creation rule →](https://docs.datadoghq.com/api/latest/security-monitoring/create-a-ticket-creation-rule.md) preview{% #create-a-ticket-creation-rule %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/automation/ticket_creation_rules | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/automation/ticket_creation_rules | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/automation/ticket_creation_rules | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules | ## [Reorder ticket creation rules →](https://docs.datadoghq.com/api/latest/security-monitoring/reorder-ticket-creation-rules.md) preview{% #reorder-ticket-creation-rules %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/reorder | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/reorder | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/automation/ticket_creation_rules/reorder | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/automation/ticket_creation_rules/reorder | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/automation/ticket_creation_rules/reorder | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/reorder | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/reorder | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/reorder | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/reorder | ## [Get a ticket creation rule →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-ticket-creation-rule.md) preview{% #get-a-ticket-creation-rule %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | ## [Update a ticket creation rule →](https://docs.datadoghq.com/api/latest/security-monitoring/update-a-ticket-creation-rule.md) preview{% #update-a-ticket-creation-rule %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | PUT https://api.ap1.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | ap2.datadoghq.com | PUT https://api.ap2.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | app.datadoghq.eu | PUT https://api.datadoghq.eu/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | app.ddog-gov.com | PUT https://api.ddog-gov.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | us2.ddog-gov.com | PUT https://api.us2.ddog-gov.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | uk1.datadoghq.com | PUT https://api.uk1.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | app.datadoghq.com | PUT https://api.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | us3.datadoghq.com | PUT https://api.us3.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | us5.datadoghq.com | PUT https://api.us5.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | ## [Delete a ticket creation rule →](https://docs.datadoghq.com/api/latest/security-monitoring/delete-a-ticket-creation-rule.md) preview{% #delete-a-ticket-creation-rule %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/security/findings/automation/ticket_creation_rules/{rule_id} | ## [Import security vulnerabilities →](https://docs.datadoghq.com/api/latest/security-monitoring/import-security-vulnerabilities.md) preview{% #import-security-vulnerabilities %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------ | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/vulnerabilities | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/vulnerabilities | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/vulnerabilities | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/vulnerabilities | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/vulnerabilities | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/vulnerabilities | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/vulnerabilities | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/vulnerabilities | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/vulnerabilities | ## [Create Linear issues for security findings →](https://docs.datadoghq.com/api/latest/security-monitoring/create-linear-issues-for-security-findings.md){% #create-linear-issues-for-security-findings %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/linear_issues | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/linear_issues | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/linear_issues | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/linear_issues | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/linear_issues | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/linear_issues | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/linear_issues | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/linear_issues | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/linear_issues | ## [Attach security findings to a Linear issue →](https://docs.datadoghq.com/api/latest/security-monitoring/attach-security-findings-to-a-linear-issue.md){% #attach-security-findings-to-a-linear-issue %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------- | | ap1.datadoghq.com | PATCH https://api.ap1.datadoghq.com/api/v2/security/findings/linear_issues | | ap2.datadoghq.com | PATCH https://api.ap2.datadoghq.com/api/v2/security/findings/linear_issues | | app.datadoghq.eu | PATCH https://api.datadoghq.eu/api/v2/security/findings/linear_issues | | app.ddog-gov.com | PATCH https://api.ddog-gov.com/api/v2/security/findings/linear_issues | | us2.ddog-gov.com | PATCH https://api.us2.ddog-gov.com/api/v2/security/findings/linear_issues | | uk1.datadoghq.com | PATCH https://api.uk1.datadoghq.com/api/v2/security/findings/linear_issues | | app.datadoghq.com | PATCH https://api.datadoghq.com/api/v2/security/findings/linear_issues | | us3.datadoghq.com | PATCH https://api.us3.datadoghq.com/api/v2/security/findings/linear_issues | | us5.datadoghq.com | PATCH https://api.us5.datadoghq.com/api/v2/security/findings/linear_issues | ## [Activate an entity context sync integration →](https://docs.datadoghq.com/api/latest/security-monitoring/activate-an-entity-context-sync-integration.md) preview{% #activate-an-entity-context-sync-integration %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_type}/activate | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_type}/activate | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/configuration/integration_config/{integration_type}/activate | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config/{integration_type}/activate | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config/{integration_type}/activate | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_type}/activate | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_type}/activate | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_type}/activate | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_type}/activate | ## [Deactivate an entity context sync integration →](https://docs.datadoghq.com/api/latest/security-monitoring/deactivate-an-entity-context-sync-integration.md) preview{% #deactivate-an-entity-context-sync-integration %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_type}/deactivate | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_type}/deactivate | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security_monitoring/configuration/integration_config/{integration_type}/deactivate | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config/{integration_type}/deactivate | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config/{integration_type}/deactivate | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_type}/deactivate | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_type}/deactivate | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_type}/deactivate | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/{integration_type}/deactivate | ## [Get Entra ID Azure App Registration prerequisites →](https://docs.datadoghq.com/api/latest/security-monitoring/get-entra-id-azure-app-registration-prerequisites.md) preview{% #get-entra-id-azure-app-registration-prerequisites %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------------------------------ | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/entra_id/azure_app_registrations | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/entra_id/azure_app_registrations | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/configuration/integration_config/entra_id/azure_app_registrations | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config/entra_id/azure_app_registrations | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/configuration/integration_config/entra_id/azure_app_registrations | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/entra_id/azure_app_registrations | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/entra_id/azure_app_registrations | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/entra_id/azure_app_registrations | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/configuration/integration_config/entra_id/azure_app_registrations | ## [Get all severity modifier rules →](https://docs.datadoghq.com/api/latest/security-monitoring/get-all-severity-modifier-rules.md) preview{% #get-all-severity-modifier-rules %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/findings/automation/severity_modifier_rules | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/findings/automation/severity_modifier_rules | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/findings/automation/severity_modifier_rules | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules | ## [Create a severity modifier rule →](https://docs.datadoghq.com/api/latest/security-monitoring/create-a-severity-modifier-rule.md) preview{% #create-a-severity-modifier-rule %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/automation/severity_modifier_rules | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/automation/severity_modifier_rules | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/automation/severity_modifier_rules | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules | ## [Reorder severity modifier rules →](https://docs.datadoghq.com/api/latest/security-monitoring/reorder-severity-modifier-rules.md) preview{% #reorder-severity-modifier-rules %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------ | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/reorder | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/reorder | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/automation/severity_modifier_rules/reorder | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/automation/severity_modifier_rules/reorder | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/automation/severity_modifier_rules/reorder | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/reorder | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/reorder | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/reorder | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/reorder | ## [Get a severity modifier rule →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-severity-modifier-rule.md) preview{% #get-a-severity-modifier-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | ## [Update a severity modifier rule →](https://docs.datadoghq.com/api/latest/security-monitoring/update-a-severity-modifier-rule.md) preview{% #update-a-severity-modifier-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | PUT https://api.ap1.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | ap2.datadoghq.com | PUT https://api.ap2.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | app.datadoghq.eu | PUT https://api.datadoghq.eu/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | app.ddog-gov.com | PUT https://api.ddog-gov.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | us2.ddog-gov.com | PUT https://api.us2.ddog-gov.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | uk1.datadoghq.com | PUT https://api.uk1.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | app.datadoghq.com | PUT https://api.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | us3.datadoghq.com | PUT https://api.us3.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | us5.datadoghq.com | PUT https://api.us5.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | ## [Delete a severity modifier rule →](https://docs.datadoghq.com/api/latest/security-monitoring/delete-a-severity-modifier-rule.md) preview{% #delete-a-severity-modifier-rule %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/security/findings/automation/severity_modifier_rules/{rule_id} | ## [Get all inbox rules →](https://docs.datadoghq.com/api/latest/security-monitoring/get-all-inbox-rules.md) preview{% #get-all-inbox-rules %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/findings/automation/inbox_rules | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/findings/automation/inbox_rules | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/findings/automation/inbox_rules | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/findings/automation/inbox_rules | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/findings/automation/inbox_rules | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/findings/automation/inbox_rules | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/findings/automation/inbox_rules | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/findings/automation/inbox_rules | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/findings/automation/inbox_rules | ## [Create an inbox rule →](https://docs.datadoghq.com/api/latest/security-monitoring/create-an-inbox-rule.md) preview{% #create-an-inbox-rule %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/automation/inbox_rules | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/automation/inbox_rules | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/automation/inbox_rules | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/automation/inbox_rules | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/automation/inbox_rules | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/automation/inbox_rules | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/automation/inbox_rules | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/automation/inbox_rules | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/automation/inbox_rules | ## [Reorder inbox rules →](https://docs.datadoghq.com/api/latest/security-monitoring/reorder-inbox-rules.md) preview{% #reorder-inbox-rules %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------ | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/automation/inbox_rules/reorder | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/automation/inbox_rules/reorder | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/automation/inbox_rules/reorder | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/automation/inbox_rules/reorder | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/automation/inbox_rules/reorder | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/automation/inbox_rules/reorder | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/automation/inbox_rules/reorder | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/automation/inbox_rules/reorder | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/automation/inbox_rules/reorder | ## [Get an inbox rule →](https://docs.datadoghq.com/api/latest/security-monitoring/get-an-inbox-rule.md) preview{% #get-an-inbox-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/findings/automation/inbox_rules/{rule_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | ## [Update an inbox rule →](https://docs.datadoghq.com/api/latest/security-monitoring/update-an-inbox-rule.md) preview{% #update-an-inbox-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | PUT https://api.ap1.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | ap2.datadoghq.com | PUT https://api.ap2.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | app.datadoghq.eu | PUT https://api.datadoghq.eu/api/v2/security/findings/automation/inbox_rules/{rule_id} | | app.ddog-gov.com | PUT https://api.ddog-gov.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | us2.ddog-gov.com | PUT https://api.us2.ddog-gov.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | uk1.datadoghq.com | PUT https://api.uk1.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | app.datadoghq.com | PUT https://api.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | us3.datadoghq.com | PUT https://api.us3.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | us5.datadoghq.com | PUT https://api.us5.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | ## [Delete an inbox rule →](https://docs.datadoghq.com/api/latest/security-monitoring/delete-an-inbox-rule.md) preview{% #delete-an-inbox-rule %} | Datadog site | API endpoint | | ----------------- | ---------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | DELETE https://api.ap1.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | ap2.datadoghq.com | DELETE https://api.ap2.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | app.datadoghq.eu | DELETE https://api.datadoghq.eu/api/v2/security/findings/automation/inbox_rules/{rule_id} | | app.ddog-gov.com | DELETE https://api.ddog-gov.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | us2.ddog-gov.com | DELETE https://api.us2.ddog-gov.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | uk1.datadoghq.com | DELETE https://api.uk1.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | app.datadoghq.com | DELETE https://api.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | us3.datadoghq.com | DELETE https://api.us3.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | | us5.datadoghq.com | DELETE https://api.us5.datadoghq.com/api/v2/security/findings/automation/inbox_rules/{rule_id} | ## [Get all default inbox rules →](https://docs.datadoghq.com/api/latest/security-monitoring/get-all-default-inbox-rules.md) preview{% #get-all-default-inbox-rules %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/findings/automation/default_inbox_rules | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/findings/automation/default_inbox_rules | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/findings/automation/default_inbox_rules | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules | ## [Get a default inbox rule →](https://docs.datadoghq.com/api/latest/security-monitoring/get-a-default-inbox-rule.md) preview{% #get-a-default-inbox-rule %} | Datadog site | API endpoint | | ----------------- | --------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id} | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id} | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security/findings/automation/default_inbox_rules/{rule_id} | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id} | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id} | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id} | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id} | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id} | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id} | ## [Enable a default inbox rule →](https://docs.datadoghq.com/api/latest/security-monitoring/enable-a-default-inbox-rule.md) preview{% #enable-a-default-inbox-rule %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/enable | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/enable | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/enable | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/enable | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/enable | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/enable | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/enable | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/enable | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/enable | ## [Disable a default inbox rule →](https://docs.datadoghq.com/api/latest/security-monitoring/disable-a-default-inbox-rule.md) preview{% #disable-a-default-inbox-rule %} | Datadog site | API endpoint | | ----------------- | ------------------------------------------------------------------------------------------------------------ | | ap1.datadoghq.com | POST https://api.ap1.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/disable | | ap2.datadoghq.com | POST https://api.ap2.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/disable | | app.datadoghq.eu | POST https://api.datadoghq.eu/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/disable | | app.ddog-gov.com | POST https://api.ddog-gov.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/disable | | us2.ddog-gov.com | POST https://api.us2.ddog-gov.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/disable | | uk1.datadoghq.com | POST https://api.uk1.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/disable | | app.datadoghq.com | POST https://api.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/disable | | us3.datadoghq.com | POST https://api.us3.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/disable | | us5.datadoghq.com | POST https://api.us5.datadoghq.com/api/v2/security/findings/automation/default_inbox_rules/{rule_id}/disable | ## [Get signals matching an event →](https://docs.datadoghq.com/api/latest/security-monitoring/get-signals-matching-an-event.md) preview{% #get-signals-matching-an-event %} | Datadog site | API endpoint | | ----------------- | ----------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/events/{event_id}/matching_signals | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/events/{event_id}/matching_signals | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/events/{event_id}/matching_signals | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/events/{event_id}/matching_signals | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/events/{event_id}/matching_signals | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/events/{event_id}/matching_signals | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/events/{event_id}/matching_signals | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/events/{event_id}/matching_signals | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/events/{event_id}/matching_signals | ## [Get recently updated entity context →](https://docs.datadoghq.com/api/latest/security-monitoring/get-recently-updated-entity-context.md) preview{% #get-recently-updated-entity-context %} | Datadog site | API endpoint | | ----------------- | -------------------------------------------------------------------------------------------- | | ap1.datadoghq.com | GET https://api.ap1.datadoghq.com/api/v2/security_monitoring/entity_context/recently_updated | | ap2.datadoghq.com | GET https://api.ap2.datadoghq.com/api/v2/security_monitoring/entity_context/recently_updated | | app.datadoghq.eu | GET https://api.datadoghq.eu/api/v2/security_monitoring/entity_context/recently_updated | | app.ddog-gov.com | GET https://api.ddog-gov.com/api/v2/security_monitoring/entity_context/recently_updated | | us2.ddog-gov.com | GET https://api.us2.ddog-gov.com/api/v2/security_monitoring/entity_context/recently_updated | | uk1.datadoghq.com | GET https://api.uk1.datadoghq.com/api/v2/security_monitoring/entity_context/recently_updated | | app.datadoghq.com | GET https://api.datadoghq.com/api/v2/security_monitoring/entity_context/recently_updated | | us3.datadoghq.com | GET https://api.us3.datadoghq.com/api/v2/security_monitoring/entity_context/recently_updated | | us5.datadoghq.com | GET https://api.us5.datadoghq.com/api/v2/security_monitoring/entity_context/recently_updated |