---
type: api
title: Snooze an alert
description: **Spaces method and path for this operation:**
url: https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-post-alerting-rule-rule-id-alert-alert-id-snooze
resource: https://www.elastic.co/elastic/docs-builder/docs/4371/api/doc/kibana/operation/operation-post-alerting-rule-rule-id-alert-alert-id-snooze
products:
  - Kibana
---

# Snooze an alert

Availability: 9.5+

- Server: `https://{kibana_url}`

## Paths

- `POST` `/api/alerting/rule/{rule_id}/alert/{alert_id}/_snooze`
- `POST` `/s/{space_id}/api/alerting/rule/{rule_id}/alert/{alert_id}/_snooze`

- [Api key auth](/elastic/docs-builder/docs/4371/api/doc/kibana/authentication#apikeyauth)
- [Basic auth](/elastic/docs-builder/docs/4371/api/doc/kibana/authentication#basicauth)

#### Path Parameters

- `rule_id` (string · max: 256)
  The identifier for the rule.
- `alert_id` (string · max: 1000)
  The identifier for the alert.

## Description

Refer to [Spaces](https://www.elastic.co/docs/deploy-manage/manage-spaces) for more information.

## Query String Parameters

- `validate_alerts_existence` (boolean)
  Set to `true` to validate that the specified alert exists. If a `400` error is returned, the specified alert does not exist. Defaults to `true`.

## Request Body

`application/json`

- `condition_operator` (enum) — optional
  Logical operator applied to the conditions array. "any" expires the snooze when at least one condition is met; "all" requires every condition to be met. When conditions are provided but this field is omitted, defaults to "any".
  Values: `any`, `all`
- `conditions` ([] union anyOf · max: 10) — optional
  One or more conditions that, when met, automatically expire the snooze. Supported types: `field_change`, `severity_change`, `severity_equals`.
  - **type: field_change**
    Expires the snooze when the value of the specified alert field changes.
    - `field` (string · max: 1000) — required
      The alert field to watch, written as a dot-notation path. When the value of the specified alert field changes, the snooze expires
    - `type` (enum) — required
      Values: `field_change`
  - **type: severity_change**
    Expires the snooze when the severity of the specified alert changes.
    - `type` (enum) — required
      Values: `severity_change`
  - **type: severity_equals**
    Expires the snooze when the severity of the specified alert equals a target level.
    - `type` (enum) — required
      Values: `severity_equals`
    - `value` (enum) — required
      The target severity level: critical, major, high, medium, minor, low, warning, or info.
      Values: `critical`, `major`, `high`, `medium`, `minor`, `low`, `warning`, `info`
- `expires_at` (string · max: 30) — optional
  The datetime at which the snooze expires, in ISO 8601 format (`YYYY-MM-DDTHH:mm:ss.sssZ`). When omitted, the snooze persists indefinitely unless manually removed or a defined condition is met.

## Responses

#### `204`

Indicates a successful call.

#### `400`

Indicates an invalid schema or parameters.

#### `403`

Indicates that this call is forbidden.

#### `404`

Indicates the specified rule or alert doesn't exist.

## Code Examples

#### Console

```console
POST /api/alerting/rule/{rule_id}/alert/{alert_id}/_snooze
```

#### curl

```curl
curl -X POST "https://{kibana_url}/api/alerting/rule/{rule_id}/alert/{alert_id}/_snooze" \
  -H "kbn-xsrf: true"
```