Set Rule

Article summary

Did you find this summary helpful?

Thank you for your feedback

Post

/rules/{oid}

Add a new detection and response rule to the organization.

Security

HTTP

Type bearer

Path parameters

oid

stringRequired

organization id

Query parameters

name

string

unique name of the new rule

is_replace

string

if the rule with this name exists, replace it, 'true' or 'false'

is_enabled

string

if the rule should be enabled, 'true' or 'false'

namespace

string

specific namespace to operate on, defaults to 'general'

Body parameters

object

detection

string

detection expression of the new rule

response

string

response expression of the new rule

Responses

200

successful operation

401

Access token is missing or invalid

Was this article helpful?