correlation.update
Description
object correlation.update(object/array **correlations**)
This method allows to update existing correlations.
Parameters
(object/array)
Correlation properties to be updated.
The correlationid
property must be defined for each correlation, all other properties are optional. Only the passed properties will be updated, all others will remain unchanged.
Additionally to the standard correlation properties, the method accepts the following parameters.
Parameter | Type | Description |
---|---|---|
filter | object | Correlation filter object to replace the current filter. |
operations | array | Correlation operations to replace existing operations. |
Return values
(object)
Returns an object containing the IDs of the updated correlations under the correlationids
property.
Examples
Disable correlation
Request:
{
"jsonrpc": "2.0",
"method": "correlation.update",
"params": {
"correlationid": "1",
"status": "1"
},
"auth": "343baad4f88b4106b9b5961e77437688",
"id": 1
}
Response:
{
"jsonrpc": "2.0",
"result": {
"correlationids": [
"1"
]
},
"id": 1
}
Replace conditions, but keep the evaluation method
Request:
{
"jsonrpc": "2.0",
"method": "correlation.update",
"params": {
"correlationid": "1",
"filter": {
"conditions": [
{
"type": 3,
"oldtag": "error",
"newtag": "ok"
}
]
}
},
"auth": "343baad4f88b4106b9b5961e77437688",
"id": 1
}
Response:
{
"jsonrpc": "2.0",
"result": {
"correlationids": [
"1"
]
},
"id": 1
}
See also
Source
CCorrelation::update() in ui/include/classes/api/services/CCorrelation.php.