Create Context Creation Model

Creates a context creation model from the data that's been supplied. Do not provide an id. IDs are auto generated

Log in to see full request history
timestatususer agent
Retrieving recent requests…
LoadingLoading…
Body Params

Context Creation Model to be added

action
array of objects

Action for the context model

action
boolean

If true, portal and API will not display new events

boolean

If true, alerts will not be processed by policies and integrations

categories
array of strings

Categories for the context model

categories
string
required

Context model description

discards
array of strings

Discard lists are NQL statements that if matched do not get processed through the event. It enables skipping certain combinations without disabling the context model

discards
boolean

If true, the context model is enabled

integer
required

Number of seconds the context creation model will remain active

factors
array of strings

Factors for the context model

factors
string
required

Name of the context model

integer
required

The lookback period for the context model. Min 15 seconds. Max 1 hour (3600)

search_by
array of objects
required

Search criteria for the context model

search_by*
thresholds
array of objects
required

Thresholds for the context model

thresholds*
track_by
array of arrays of strings
required

Tracking criteria for the context model

track_by*
integer

When ongoing updates should be sent. Max 6 hours (21600). 0 for disabled

Responses

Language
Credentials
Click Try It! to start a request and see the response here! Or choose an example:
application/json