> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Update Alerts

Update an alert or multiple ones. Allows you to update the status, assign it to a user, add comments with additional info, ect.

The following permission is required to run this action:

* `Alerts`: **Read** and **Write**.

<Note>
  This endpoint does not support detection IDs prefixed with ldt.
</Note>

<Note>
  External Documentation

  To learn more, visit the [CrowdStrike documentation](https://falcon.us-2.crowdstrike.com/documentation/page/adf2fd07/incident-detection-and-alert-monitoring-apis#i95fe184).
</Note>

## Parameters

<div className="integrations-table">
  | Parameter         | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
  | ----------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
  | Action Parameters | A comma-separated list of the parameters for the prospective action.<br />As you work on an alert, you’ll often need to update the status, assign it to a user, or add comments with additional info.<br /><br />In most cases, you must provide both the action name, such as update\_status, and a value, such as in\_progress, in the body of the request. Some actions accept empty values.<br /><br />You can perform these actions on alerts:<br /><br />- `add_tag`: Add a tag (keyword) to the specified alerts.<br /><br />- `append_comment`: Appends a new comment to any existing comments for the specified alerts.<br /><br />- `assign_to_name`: Assign the specified alerts to a user based on their username.<br /><br />- `assign_to_user_id`: Assign the specified alerts to a user based on their email address.<br /><br />- `assign_to_uuid`: Assign the specified alerts to a user based on their UUID.<br /><br />- `remove_tag`: Remove a tag from the specified alerts.<br /><br />- `remove_tags_by_prefix`: Remove all tags containing a given prefix from the specified alerts.<br /><br />- `show_in_ui`: If the value specified is true, display the specified alerts in the Falcon console. Any other value, including an empty value, prevents the specified alerts from appearing in the Falcon console.<br /><br />- `unassign`: If there are any users currently assigned to the specified alerts, unassign them.<br /><br />  This action doesn’t require a value; if one is specified, the value is ignored.<br /><br />- `update_status`: Update the status for the specified alerts.<br />    Valid statuses are:<br />      - closed<br />      - in\_progress<br />      - new<br />      - reopened |
  | Alert IDs         | Comma separated list of alert IDs to get details on. This endpoint does not support detection IDs prefixed with ldt.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
</div>

## Example Output

```json theme={"dark"}
{
	"meta": {
		"query_time": 0.209774393,
		"writes": {
			"resources_affected": 2
		},
		"powered_by": "detectsapi",
		"trace_id": "8326daf7-d03a-4268-a6f9-8e7195a50ec6"
	}
}
```

## Workflow Library Example

[Update Alerts with Crowdstrike and Send Results Via Email](https://library.blinkops.com/workflows/update-alerts-with-crowdstrike-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/update-alerts-with-crowdstrike-and-send-results-via-email/canvas" />
</div>