Community Webinar: Outsmarting the Adversary - Applied Threat Intelligence in Google SecOps
Hi,
is there any API endpoint to manage alerts? We'd like to be able to close alerts from scripting and external systems.
Thanks.
M.
Chronicle's REST API has a method that can be used to update alerts. The documentation can be found here.
@migueltubia, we also recently shared a Python module that calls the legacyUpdateAlert API method that David referred to. You can find it here:https://github.com/chronicle/api-samples-python/blob/master/detect/v1alpha/update_alert.py
Already have an account? Login
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.