Forum Discussion

ingwarr23's avatar
ingwarr23
Copper Contributor
Apr 20, 2020

How to update an alert using PUT method

Hi!

Do you know if it is possible to update a Sentinel Alert using a PUT httpRequest?

I have tried, but I get this message: 

{
    "error": {
        "code": "Conflict",
        "message": "Newer instance of rule 'ruleId' exists for workspace 'workspaceId' (Etag does not match). Data was not saved."
    }
}
Thank you!
  • GaryBushey's avatar
    GaryBushey
    Bronze Contributor

    ingwarr23 I would say no as that would allow bad guys to potentially edit the information in an alert to make it seem benign.   You can always update the Incident that the alert may have generated.

     

    Can you state what it is you are trying to update?

Resources