Update Alert Analyst Verdict - BlinkOps Documentation

Change the analyst verdict of an alert using the Unified Alert Management GraphQL API.

Parameters

Parameter	Description
Alert ID	The ID of the alert to update the analyst verdict for.
Analyst Verdict	Select the new analyst verdict to apply.

Example Output

{
	"data": {
		"alertTriggerActions": {
			"actions": [
				{
					"actionId": "<string>",
					"skip": null,
					"failure": null,
					"success": {
						"id": "<string>",
						"__typename": "<string>"
					},
					"__typename": "<string>"
				}
			]
		}
	}
}

Workflow Library Example

Update Alert Analyst Verdict with Sentinelone and Send Results Via Email

Preview this Workflow on desktop