Rescore historical alerts
post/alerts/historicalRescore
Rescores historical alerts based on the provided rescore request.
1{2 "name": "alertRescores",3 "count": 1,4 "items": [5 {6 "alertId": "536717b3-192a-4611-ac07-055708e2281b",7 "scoreRep": {8 "creationTimeStamp": "2026-06-02T16:34:48.914Z",9 "createdBy": "sas.svi-alert",10 "links": [11 {12 "method": "GET",13 "rel": "collection",14 "href": "/svi-alert/alertingEvents/de3c620c-dd36-4a88-bd71-d61e20c9f952/scores",15 "uri": "/svi-alert/alertingEvents/de3c620c-dd36-4a88-bd71-d61e20c9f952/scores",16 "type": "application/vnd.sas.collection"17 }18 ],19 "scoreId": "fef932c1-e79d-433a-9d8a-3e22db1340c5",20 "alertingEventId": "de3c620c-dd36-4a88-bd71-d61e20c9f952",21 "score": 600,22 "scenarioFiredEventIds": [23 "252dbd42-ae19-a84c-b700-0e5a8c6454d1"24 ],25 "suppressedScenarioFiredEventIds": [],26 "scoreCalculatedFlag": true27 },28 "version": 229 }30 ],31 "accept": "application/vnd.sas.investigation.triage.alert.rescore.result+json",32 "description": "OK."33}persistScore | boolean | false | Specifies the flag indicating whether to persist the historical rescore, which returns the rescore results without actually updating the alert scores. Default: true |
Accept | string | true | Specifies the media type of the response. Allowed values: application/vnd.sas.collection/jsonapplication/jsonapplication/vnd.sas.fcs.tdc.alert.id+json |
Content-Type | string | true | Specifies the media type of the request. Allowed values: application/jsonapplication/vnd.sas.investigation.triage.historical.rescore.request+json |
| Status | Meaning | Description | ||
|---|---|---|---|---|
| 201 | Created | The request succeeded. | Schema | |
| 400 | Bad Request | The request was invalid. | Schema | |
| 403 | Forbidden | The user did not have the necessary permissions. | Schema |