Snooze an alert
https://{kibana_url}
- POST /api/alerting/rule/{rule_id}/alert/{alert_id}/_snooze
Query Parameters
-
validate_alerts_existenceboolean Set to
trueto validate that the specified alert exists. If a400error is returned, the specified alert does not exist. Defaults totrue.
Request
-
condition_operator -
Logical operator applied to the conditions array. "any" expires the snooze when at least one condition is met; "all" requires every condition to be met. When conditions are provided but this field is omitted, defaults to "any".
-
Values:
anyall -
conditionsanyOf · max: 10 -
One or more conditions that, when met, automatically expire the snooze. Supported types:
field_change,severity_change,severity_equals. -
type -
Values:
severity_change -
expires_atstring · max: 30 -
The datetime at which the snooze expires, in ISO 8601 format (
YYYY-MM-DDTHH:mm:ss.sssZ). When omitted, the snooze persists indefinitely unless manually removed or a defined condition is met.
Expires the snooze when the value of the specified alert field changes.
Expires the snooze when the severity of the specified alert changes.
Responses
Indicates a successful call.
Indicates an invalid schema or parameters.
Indicates that this call is forbidden.
Indicates the specified rule or alert doesn't exist.