Connectors
...
Actions
Update Security Event Status
5 min
description updates the status of a specified security event in cyberark to open or closed, using the provided securityeventid endpoint url /passwordvault/api/pta/api/events/{{securityeventid}} method patch inputs path parameters (object) – required securityeventid (string) – required security event id json body (object) mstatus (string) the new status of the event closereason (string) the close reason for the security event after you have investigated and handled the event successfully or determined to close it for other reasons reasontext (string) free text for the user to elaborate on the close reason limited to 100 characters output example \[ { "status code" 200, "response headers" {}, "reason" "success", "json body" { "id" "444445e56bbb0b0a063f4444", "type" "psmsuspiciousactivity", "score" 70, "createtime" 1586134861000, "lastupdatetime" 1586134861000, "audits" \[ { "id" "5e3045e56bbb0b0a063fbbbb", "type" "psm ssh command", "sensortype" "vault", "action" "psm command", "psmcommand" "bla", "createtime" 1586134861000, "vaultuser" "vuser", "account" { "accountasstr" "hi2\@example cyber ark co il", "type" "local unix", "account" { "mtarget" { "moriginaladdress" "10 1 8 182", "mresolvedaddress" { "moriginaladdress" "10 1 8 182", "maddress" "10 1 8 182", "mhostname" "cyber", "mfqdn" "example cyber ark co il" } }, "muser" "hi2" } }, "source" { "moriginaladdress" "1 1 1 1" }, "target" { "moriginaladdress" "10 1 8 182", "mresolvedaddress" { "moriginaladdress" "10 1 8 182", "maddress" "10 1 8 182", "mhostname" "cyber", "mfqdn" "example cyber ark co il" } }, "clouddata" {} } ], "additionaldata" { "matchpatterns" "kill( )" }, "mstatus" "closed", "closereason" "handled", "reasontext" "handled by soc team" } } ] output parameters status code (number) reason (string) json body (object) id (string) type (string) score (number) createtime (number) lastupdatetime (number) audits (array) id (string) type (string) sensortype (string) action (string) psmcommand (string) createtime (number) vaultuser (string) account (object) accountasstr (string) type (string) account (object) mtarget (object) moriginaladdress (string) mresolvedaddress (object) moriginaladdress (string) maddress (string) mhostname (string) mfqdn (string) muser (string) source (object) moriginaladdress (string) target (object) moriginaladdress (string) mresolvedaddress (object) moriginaladdress (string) maddress (string) mhostname (string) mfqdn (string) clouddata (object) additionaldata (object) matchpatterns (string) mstatus (string) closereason (string) reasontext (string)