Update an Event Supervised Correlation Policy

put

/api/event/SupervisedCorrelations/{id}

Updates the properties of the event supervised correlation policy that matches the specified ID.
The minimum required properties in the request body are:
  • SupervisedCorrelationName
  • MatchFields
  • MetaEventID
  • GroupByFields
  • MinimumMembers
  • TimeWindow
You must also include properties for the field set in MatchFields as <Field> and <Field>Root. For example, if you set the value of MatchFields to ["Ack"], you must also include AckRoot and Ack.

Request

Path Parameters
Supported Media Types
Request Body - application/json ()
Root Schema : schema
Type: object
Show Source
  • The event field or fields to group by
    Example: Ack
  • MatchFields
    The event fields that must have matching values to fit the cluster
  • MetaEventID
    Meta event to create as the root cause
  • Minimum number of events to establish an event cluster based on the correlation policy definition
    Example: 1
  • The supervised correlation status ID. Either 0 (disabled) or 1 (enabled).
    Example: 1
  • The supervised correlation name.
    To avoid confusion with numeric IDs, the name value cannot be integers only or integers prefixed with the + or - symbols only. It must contain letters or other characters. For example, 1234, +1234, and -1234 are not valid, but US1234, US+1234 and US_1234 are.
    Example: SC Name
  • Length of the time window for the correlation policy, in seconds
    Example: 30
Nested Schema : MatchFields
The event fields that must have matching values to fit the cluster
Match One Schema
Show Source
Example:
SubNode
Nested Schema : MetaEventID
Meta event to create as the root cause
Match One Schema
Show Source
Example:
1
Nested Schema : MatchFields-oneOf[0]
Type: array
Back to Top

Response

Supported Media Types

200 Response

Successful operation
Body ()
Root Schema : schema
Match All
Show Source
Nested Schema : SuccessfulUpdateOperation
Type: object
The response body for a successful update operation.
Show Source
Nested Schema : type
Type: object
Show Source
Nested Schema : data
Type: array
The properties of the updated event supervised correlation policy.
Show Source
Nested Schema : eventSupervisedCorrelationsRead
Type: object
Show Source
Nested Schema : MatchFields
The event fields that must have matching values to fit the cluster
Match One Schema
Show Source
Example:
SubNode
Nested Schema : MatchFieldValues
The values of the match fields
Match One Schema
Show Source
Example:
test
Nested Schema : MetaEventID
Meta event to create as the root cause
Match One Schema
Show Source
Example:
1
Nested Schema : MatchFields-oneOf[0]
Type: array
Nested Schema : MatchFieldValues-oneOf[0]
Type: array

Default Response

Failed operation
Body ()
Root Schema : schema
Type: object
Show Source
Nested Schema : errors
Type: array
The list of errors reported. Validation errors will be keyed by record field.
Show Source
Nested Schema : items
Type: object
An error.
Back to Top