Add exception items to a detection rule
One step with Elastic Stack. We can help you get access.
Get something done
Add exception items to a detection rule
with Elastic Stack · Threat Detection & Response Management
Use Elastic Stack: its Kibana Security Exceptions API lets you add exception items to a detection rule in a single step (POST /api/detection_engine/rules/{id}/exceptions). capabilities.work can help you get signed up and connected.
- How do I add an exception directly to one detection rule so it stops alerting on known-good activity?
- Can I attach several exception items to a rule in one request?
Say it to your AI assistant
- Add exception items {items} to detection rule {id}.
- Create rule exceptions {items} on rule {id} to suppress false positives.
For your developer
POST /api/detection_engine/rules/{id}/exceptions in Kibana Security Exceptions API. Full spec on APIs.io.