Skip to main content
POST
Create a custom security detection rule

Authorizations

oiq_token
string
cookie
required

Query Parameters

tenantId
string

Tenant identifier. Overwritten from the authenticated session; a value naming a different tenant is refused with 403.

Required string length: 1 - 64
Pattern: ^[A-Za-z0-9][A-Za-z0-9_-]*$

Body

application/json
name
string
Required string length: 1 - 256
description
string
Maximum string length: 4096
eventTypes
string[]
Maximum string length: 128
severities
string[]
Maximum string length: 32
actions
string[]
Maximum string length: 128
actorPattern
string | null
Maximum string length: 512
ipPattern
string | null
Maximum string length: 512
threshold
windowMins
cooldownMins
severity
string
Maximum string length: 16
channel
string | null
Maximum string length: 32
channelConfig
autoAction
string | null
Maximum string length: 128
enabled
boolean

Response

200

Success