Update Network Detection Model

Update a network detection model given the provided object. This does not do a diff. You must send the complete object.

Log in to see full request history
timestatususer agent
Retrieving recent requests…
LoadingLoading…
Path Params
string
required

The ID of the network detection model to be updated

Body Params

Network detection model to be updated

boolean

If true, portal and API will not display new events

boolean

If true, alerts will not be processed by policies and integrations

categories
array of strings
required

Categories for the detection model

categories*
string
required

Detection model description

discards
array of strings

Discard lists are NQL statements that if matched do not get processed through the event. It enables skipping certain combinations without disabling the detection model

discards
boolean

If true, the detection model is enabled

factors
array of strings

Factors for the detection model

factors
string
required

Name of the detection model

integer
required

The lookback period for the detection model. Min 15 seconds. Max 1 hour (3600)

search_by
array of objects
required

Search criteria for the detection model

search_by*
thresholds
array of objects
required

Thresholds for the detection model

thresholds*
track_by
array of arrays of strings
required

Tracking criteria for the detection model

track_by*
integer

When ongoing updates should be sent. Max 6 hours (21600). 0 for disabled

Responses

Language
Credentials
Click Try It! to start a request and see the response here! Or choose an example:
application/json