External DocumentationTo learn more, visit the Devo documentation.
Actions
Update Alert Status
Update alert status by the alert ID.

Preview this Workflow on desktop
Was this page helpful?
Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
| Parameter | Description |
|---|---|
| ID | ID of the alert you want to update. Can be retrieved using the List Triggered Alerts action. |
| Status | New status of the alert. |
{
"id": 123456,
"domain": "demo",
"priority": 5,
"context": "my.alert.demo.SecIntSeveralDNS",
"category": "my.context",
"srcPort": null,
"srcIp": null,
"srcHost": null,
"dstIp": null,
"dstPort": null,
"dstHost": null,
"protocol": null,
"username": "user@devo.com",
"application": null,
"engine": "pilot.my.alert.demo.SecIntSeveralDNS",
"extraData": "{\"sourceIP\":\"%2F194.140.174.171\",\"totalservers\":\"71\",\"destinationCount\":\"71.00007511654165\",\"eventdate\":\"2023-04-05+07%3A00%3A00.0\"}",
"alertDate": null,
"status": 100,
"ack_status_date": null,
"createDate": 1680681772000,
"updateDate": 1680683709802,
"scaled": false,
"digest": "c80cfdff6620d2a07f757690f8137ca17635479b",
"uniquedigest": "a63d213133dd3f7756c265ea2c712fe8c0a4fc18",
"postAlertAction": null,
"contextLabel": null,
"contextSubscription": null,
"shouldSend": false,
"alertOwner": null,
"fullExtraData": null,
"alertType": null,
"alertMitreTactics": null,
"alertMitreTechniques": null,
"alertPriority": null,
"alertDefinition": null,
"allExtraDataFields": null,
"tags": null,
"entities": null,
"commentsList": null,
"integrations": null,
"contexto": null
}
Was this page helpful?