> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Update Alert

Update alert by alert ID.

## Basic Parameters

<div className="integrations-table">
  | Parameter   | Description                                                      |
  | ----------- | ---------------------------------------------------------------- |
  | Alert ID    | The \_id of the entity or its 'name' (depends of the entity).    |
  | Assignee    | The username of the analyst this resource should be assigned to. |
  | Description | The main detailed description and context for the resource.      |
  | Status      | The status of the resource.                                      |
  | Title       | A short, descriptive title for the resource.                     |
  | Type        | The category or type of the alert.                               |
</div>

## Advanced Parameters

<div className="integrations-table">
  | Parameter      | Description                                                                                                                                                                                                                                                                                                                                                               |
  | -------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
  | Add Tags       | Those tags will be added to the current alert.                                                                                                                                                                                                                                                                                                                            |
  | Custom Fields  | Custom fields as an array of objects.<br /><br />For more information about the `Custom Fields` parameter, visit [TheHive API documentation](https://docs.strangebee.com/thehive/api-docs/#tag/CustomField).                                                                                                                                                              |
  | Date           | The timestamp (milliseconds epoch) for when the event occurred. Defaults to the time the alert is created if omitted.                                                                                                                                                                                                                                                     |
  | External Link  | A URL linking back to the alert or event in the source system.                                                                                                                                                                                                                                                                                                            |
  | Follow         | -                                                                                                                                                                                                                                                                                                                                                                         |
  | Last Sync Date | -                                                                                                                                                                                                                                                                                                                                                                         |
  | PAP            | Prioritized Asset Profile, the severity level that is used to indicate the importance of an asset.<br /><br />White: The asset is not critical.<br /><br />Green: The asset is important, but not critical.<br /><br />Amber: The asset is critical.<br /><br />Red: The asset is essential.                                                                              |
  | Remove Tags    | Those tags will be removed from the current alert.                                                                                                                                                                                                                                                                                                                        |
  | Severity       | The severity level of the resource.                                                                                                                                                                                                                                                                                                                                       |
  | Source         | The source system or tool that generated the alert.                                                                                                                                                                                                                                                                                                                       |
  | Source Ref     | The unique identifier for this alert within its original source system.                                                                                                                                                                                                                                                                                                   |
  | Summary        | A brief summary of the resource.                                                                                                                                                                                                                                                                                                                                          |
  | TLP            | Traffic Light Protocol, a set of designations used to ensure that sensitive information is shared with the appropriate audience.<br /><br />CLEAR: unlimited formerly.<br /><br />GREEN: community-wide.<br /><br />AMBER: limited distribution.<br /><br />AMBER+STRICT: restricts sharing to the organization only.<br /><br />RED: personal for named recipients only. |
  | Tags           | An array of keywords (tags) as strings to categorize the resource.                                                                                                                                                                                                                                                                                                        |
</div>

## Workflow Library Example

[Update Alert with Thehive and Send Results Via Email](https://library.blinkops.com/workflows/update-alert-with-thehive-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/update-alert-with-thehive-and-send-results-via-email/canvas" />
</div>