{"type":"api","title":"Update Alert Rule","meta":{"id":"/apps/pubhub/media/cloud-security-apis-in-eft/83e8a10367d157243cd1c3e478b807cb81262a3d/e7c4374c-388b-3f3f-bd38-63991a559765","info":{"title":"Cisco Secure Access Alerting API","version":"1.0.0","description":"Manage the alert rules in the organization and monitor the alerts generated by the alert rules.","contact":{"name":"Cloud Security Developer Community"}},"security":[{"oauthFlow":[]}],"tags":[{"name":"Alert Rules"},{"name":"Alerts"},{"name":"Secure Access"}],"x-parser-conf":{"overview":{"markdownPath":"secure-access/reference/admin/alert-rules-overview.md","uri":"secure-access-api-reference-alerting-overview"}},"openapi":"3.0.0","servers":[{"url":"https://api.sse.cisco.com/{basePath}","variables":{"basePath":{"default":"admin/v2"}}}],"securitySchemes":{"oauthFlow":{"type":"oauth2","description":"The client credential flow.","flows":{"clientCredentials":{"tokenUrl":"https://api.sse.cisco.com/auth/v2/token","scopes":{"admin.alertrules:read":"Read Alert Rules","admin.alertrules:write":"Write Alert Rules","admin.alerts:read":"Read Alerts","admin.alerts:write":"Write Alerts"}}}}}},"spec":{"operationId":"updateAlertRule","summary":"Update Alert Rule","description":"Update the properties of an alert rule.","parameters":[{"name":"ruleId","in":"path","required":true,"description":"The unique identifier of the alert rule.","schema":{"type":"integer"},"example":42,"$$ref":"#/components/parameters/ruleId"}],"tags":["Alert Rules","Secure Access"],"security":[{"oauthFlow":["admin.alertrules:write"]}],"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","description":"The properties of the alert rule used by the system to update an alert rule.","properties":{"name":{"type":"string","maxLength":255,"description":"The unique name of the alert rule.","example":"Production VPN Tunnel Alert","$$ref":"#/components/schemas/nameAlertRule"},"description":{"type":"string","maxLength":100,"description":"The description of the alert rule.","example":"Alert when production VPN tunnel disconnects","$$ref":"#/components/schemas/descriptionAlertRule"},"severity":{"type":"integer","enum":[1,2,3,4],"description":"The severity of the alert. The supported severity levels are:\n- 1 (High)\n- 2 (Medium)\n- 3 (Low)\n- 4 (Info)","example":1,"$$ref":"#/components/schemas/severityAlert"},"status":{"type":"integer","enum":[1,2],"description":"The status of the alert rule. The supported status types are:\n- 1 (Enabled)\n- 2 (Disabled)","example":1,"$$ref":"#/components/schemas/statusAlertRule"},"rule_type_id":{"type":"integer","description":"The identifier of the rule type.","example":1,"$$ref":"#/components/schemas/ruleTypeId"},"notification_info":{"type":"array","description":"The list of notifications for the alert rule.","items":{"type":"object","description":"The properties of the notification for the alert rule.","properties":{"type":{"type":"string","enum":["email","webhook"],"description":"The type of the notification for the alert rule.","example":"webhook","$$ref":"#/components/schemas/notificationTypeAll"},"recipients":{"type":"array","description":"The list of email recipients configured in the alert rule to receive the notification.","minItems":1,"maxItems":50,"items":{"type":"string","format":"email","description":"An email recipient for the notification."},"example":["admin@company.com","ops@company.com"]},"webhook_ids":{"type":"array","description":"The list of unique identifiers for the Webhooks configured on the alert rule.","items":{"type":"string","description":"The unique identifier for the Webhook ID.","example":"1abcde"}}},"$$ref":"#/components/schemas/notificationInfoAlertRule"}},"conditions":{"type":"object","description":"The conditions that trigger the type of notification.","properties":{"match_type":{"type":"string","enum":["all","any",""],"description":"Choose from one of the accepted conditions: `all` (AND), `any` (OR), or ''.","example":"all"},"rows":{"type":"array","description":"The list of conditions that the system uses to evaluate the alert rule.","items":{"type":"object","description":"The conditions that define the alert rule.","required":["field","value"],"properties":{"field":{"type":"string","description":"The name of the condition."},"value":{"type":"string","description":"The canonical name of the geographical region for the data center where the notification occurs."}}}}},"$$ref":"#/components/schemas/conditionsAlertRule"}}},"example":{"name":"SFO-02 Hub down","description":"Alert when SFO-02 Hub is down","severity":1,"status":1,"rule_type_id":1,"notification_info":[{"type":"email","recipients":["admin@example.com"]}],"conditions":{"match_type":"all","rows":[{"field":"tunnelGroupName","value":"test2"},{"field":"region","value":"US West-2"}]}}}},"$$ref":"#/components/requestBodies/UpdateAlertRuleRequestBody"},"responses":{"200":{"description":"OK","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The date and time (ISO 8601-formatted timestamp) when the system returned the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","description":"The properties of the updated alert rule.","properties":{"message":{"type":"string","description":"The message from the system about the update of the alert rule.","example":"Rule updated successfully"}}},"example":{"message":"Rule updated successfully"}}}},"400":{"description":"Bad Request","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The date and time (ISO 8601-formatted timestamp) when the system returned the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string","description":"Bad Request","example":"Not found IAM key info for org 12355."},"status":{"type":"integer","description":"The HTTP status code returned in the response.","example":400}}}}},"$$ref":"#/components/responses/400Error"},"401":{"description":"Unauthorized","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The date and time (ISO 8601-formatted timestamp) when the system returned the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string","description":"Unauthorized","example":"Authorization token is invalid."},"status":{"type":"integer","description":"The HTTP status code returned in the response.","example":401}}}}},"$$ref":"#/components/responses/401Error"},"403":{"description":"Forbidden","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The date and time (ISO 8601-formatted timestamp) when the system returned the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string","description":"Error message explaining the reason for failure.","example":"Forbidden"},"status":{"type":"integer","description":"The HTTP status code returned in the response.","example":403}}}}},"$$ref":"#/components/responses/403Error"},"404":{"description":"Not Found","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The date and time (ISO 8601-formatted timestamp) when the system returned the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string","description":"Error message explaining the reason for failure.","example":"Not Found"},"status":{"type":"integer","description":"The HTTP status code returned in the response.","example":404}}}}},"$$ref":"#/components/responses/404Error"},"409":{"description":"Conflict","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The date and time (ISO 8601-formatted timestamp) when the system returned the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string","description":"Error message explaining the reason for failure.","example":"A rule with this name already exists for this organization"},"status":{"type":"integer","description":"The HTTP status code returned in the response.","example":409}}}}},"$$ref":"#/components/responses/409Error"},"422":{"description":"Unprocessable Entity (Too many email recipients or webhooks in notification_info)","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The date and time (ISO 8601-formatted timestamp) when the system returned the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string","example":"Bad Request, Maximum 50 email recipients allowed per rule, found 100"},"status":{"type":"integer","description":"The HTTP status code returned in the response.","example":422}}},"example":{"error":"Bad Request, Maximum 50 email recipients allowed per rule, found 100"}}},"$$ref":"#/components/responses/422Error"},"429":{"description":"Too Many Requests","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The date and time (ISO 8601-formatted timestamp) when the system returned the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string","description":"Error message explaining the reason for failure.","example":"Rate limit exceeded"},"status":{"type":"integer","description":"The HTTP status code returned in the response.","example":404}}}}},"$$ref":"#/components/responses/429Error"},"500":{"description":"Internal Server Error","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json","$$ref":"#/components/headers/Content-Type"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The date and time (ISO 8601-formatted timestamp) when the system returned the response.","example":"2023-03-14T18:34:25Z","$$ref":"#/components/headers/Date"}},"content":{"application/json":{"schema":{"type":"object","properties":{"error":{"type":"string","description":"Error message explaining the reason for failure.","example":"Internal Server Error"},"status":{"type":"integer","description":"The HTTP status code returned in the response.","example":500}}}}},"$$ref":"#/components/responses/500Error"}},"__originalOperationId":"updateAlertRule","method":"put","path":"/alerting/rules/{ruleId}"}}