capabilities.work

Change specific fields of a detection rule

One step with Elastic Stack. We can help you get access.

Get something done

Change specific fields of a detection rule

with Elastic Stack · Threat Detection & Response Management

Use Elastic Stack: its Kibana Security Detections API lets you change specific fields of a detection rule in a single step (PATCH /api/detection_engine/rules). capabilities.work can help you get signed up and connected.

  • Can I change just a rule's severity without resending the whole rule?
  • What's the way to partially update a detection rule?
Say it to your AI assistant
  • Patch only the severity and risk score of an existing detection rule.
  • Disable one detection rule by changing just its enabled field.
For your developer

PATCH /api/detection_engine/rules in Kibana Security Detections API. Full spec on APIs.io.

More you can do with Elastic Stack

Assign users to attack discovery alertsSearch and aggregate attack discoveriesChange the workflow status of attack discoveriesTag or untag attack discoveriesCheck the security alerts indexCreate the security alerts indexDelete the security alerts indexCheck my security detection privilegesGet a detection ruleReplace a detection ruleCreate a detection ruleDelete a detection rule