| title | Update alert |
|---|---|
| description | Update the properties of an alert object. |
| author | huatang92 |
| ms.localizationpriority | medium |
| ms.subservice | entra-monitoring-health |
| doc_type | apiPageType |
| ms.date | 11/01/2024 |
Namespace: microsoft.graph.healthMonitoring
[!INCLUDE beta-disclaimer]
Update the properties of a Microsoft Entra health monitoring alert object. For example, change an alert's state from active to resolved.
[!INCLUDE national-cloud-support]
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.
[!INCLUDE permissions-table]
[!INCLUDE rbac-healthmonitoring-alert-apis-write]
PATCH /reports/healthMonitoring/alerts/{alertId}| Name | Description |
|---|---|
| Authorization | Bearer {token}. Required. Learn more about authentication and authorization. |
| Content-Type | application/json. Required. |
| Prefer: include-unknown-enum-members | Enables evolvable enum values beyond the sentinel value. For more information, see Best practices for working with Microsoft Graph. Optional. |
[!INCLUDE table-intro]
| Property | Type | Description |
|---|---|---|
| state | microsoft.graph.healthMonitoring.alertState | The current lifecycle state of the alert. The possible values are: active, resolved, unknownFutureValue. Required. |
If successful, this method returns a 200 OK response code and an updated microsoft.graph.healthMonitoring.alert object in the response body.
The following example shows a request.
PATCH https://graph.microsoft.com/beta/reports/healthMonitoring/alerts/{alertId}
Content-Type: application/json
{
"state": "resolved"
}[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
[!INCLUDE sample-code] [!INCLUDE sdk-documentation]
The following example shows the response.
Note: The response object shown here might be shortened for readability.
HTTP/1.1 200 OK
Content-Type: application/json
{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#reports/healthMonitoring/alerts/$entity",
"id": "0c56dfcb-13db-4128-bda2-fc3e42742467",
"alertType": "mfaSignInFailure",
"scenario": "mfa",
"category": "authentication",
"createdDateTime": "2024-06-19T11:23:44.1234567Z",
"state": "resolved",
"enrichment": {
"state": "enriched",
"impacts": [
{
"@odata.type": "#microsoft.graph.healthMonitoring.userImpactSummary",
"resourceType": "user",
"impactedCount": 143,
"impactedCountLimitExceeded": false
},
{
"@odata.type": "#microsoft.graph.healthMonitoring.applicationImpactSummary",
"resourceType": "application",
"impactedCount": 1,
"impactedCountLimitExceeded": true
}
],
"supportingData": {
"signIns": "https://graph.microsoft.com/beta/auditLogs/signIns?$filter=((status/errorCode eq 500121) and createdDateTime gt 2024-06-08T11:23:44.1234567Z and createdDateTime le 2024-06-19T11:23:44.1234567Z and (signInEventTypes/any(t:t eq 'interactiveUser' or t eq 'noninteractiveUser')))",
"audits": "https://graph.microsoft.com/beta/auditLogs/directoryaudits?$filter=(activityDateTime ge 2024-06-08T11:23:44.1234567Z and activityDateTime le 2024-06-19T11:23:44.1234567Z)&$top=50&$orderby=activityDateTime desc"
}
},
"signals": {
"mfaSignInFailure": "https://graph.microsoft.com/beta/reports/serviceActivity/getMetricsForMfaSignInFailure(inclusiveIntervalStartDateTime=2024-06-08T11:23:44.1234567Z, exclusiveIntervalEndDateTime=2024-06-19T11:23:44.1234567Z, aggregationIntervalInMinutes=5)"
},
"documentation": {
"troubleshootingGuide": "https://go.microsoft.com/fwlink/?linkid=2280158"
}
}