- HTTP request
- Path parameters
- Query parameters
- Request body
- Response body
- Authorization scopes
- IAM Permissions
Full name: projects.locations.instances.legacySdk.legacyUpdateAlertsAdditional
Updates the additional data fields associated with a specific alert. Use this method to enrich an alert with supplementary context discovered during investigation, such as forensic metadata or analyst-defined markers.
HTTP request
POST https://chronicle.africa-south1.rep.googleapis.com/v1alpha/{instance}/legacySdk:legacyUpdateAlertsAdditional Path parameters
| Parameters | |
|---|---|
instance |
Required. The UpdateAlertsAdditional request. Format: projects/{project}/locations/{location}/instances/{instance}/legacySdk:updateAlertsAdditional |
Query parameters
| Parameters | |
|---|---|
format |
Optional. The format of the field names in the response. Could be snake or camel. |
Request body
The request body contains an instance of Struct.
Response body
If successful, the response body is an empty JSON object.
Authorization scopes
Requires one of the following OAuth scopes:
https://www.googleapis.com/auth/cloud-platformhttps://www.googleapis.com/auth/chroniclehttps://www.googleapis.com/auth/chronicle.readonly
For more information, see the Authentication Overview.
IAM Permissions
Requires the following IAM permission on the instance resource:
chronicle.legacySdk.update
For more information, see the IAM documentation.