Rescore historical alerts

post/alerts/historicalRescore

Rescores historical alerts based on the provided rescore request.

Request Samples

Response Samples

1{
2 "name": "alertRescores",
3 "count": 1,
4 "items": [
5 {
6 "alertId": "536717b3-192a-4611-ac07-055708e2281b",
7 "scoreRep": {
8 "creationTimeStamp": "2026-06-02T16:34:48.914Z",
9 "createdBy": "sas.svi-alert",
10 "links": [
11 {
12 "method": "GET",
13 "rel": "collection",
14 "href": "/svi-alert/alertingEvents/de3c620c-dd36-4a88-bd71-d61e20c9f952/scores",
15 "uri": "/svi-alert/alertingEvents/de3c620c-dd36-4a88-bd71-d61e20c9f952/scores",
16 "type": "application/vnd.sas.collection"
17 }
18 ],
19 "scoreId": "fef932c1-e79d-433a-9d8a-3e22db1340c5",
20 "alertingEventId": "de3c620c-dd36-4a88-bd71-d61e20c9f952",
21 "score": 600,
22 "scenarioFiredEventIds": [
23 "252dbd42-ae19-a84c-b700-0e5a8c6454d1"
24 ],
25 "suppressedScenarioFiredEventIds": [],
26 "scoreCalculatedFlag": true
27 },
28 "version": 2
29 }
30 ],
31 "accept": "application/vnd.sas.investigation.triage.alert.rescore.result+json",
32 "description": "OK."
33}

Query Parameters

persistScore
boolean
false

Specifies the flag indicating whether to persist the historical rescore, which returns the rescore results without actually updating the alert scores.

Default:
true

Header Parameters

Accept
string
true

Specifies the media type of the response.

Allowed values:
application/vnd.sas.collection/jsonapplication/jsonapplication/vnd.sas.fcs.tdc.alert.id+json
Content-Type
string
true

Specifies the media type of the request.

Allowed values:
application/jsonapplication/vnd.sas.investigation.triage.historical.rescore.request+json

Request Body

An alert rescore request representation.

NameTypeRequiredDescription
alertIds
array [string]
false
batchSize
integer
false

Responses

StatusMeaningDescription
201Created

The request succeeded.

Schema
400Bad Request

The request was invalid.

Schema
403Forbidden

The user did not have the necessary permissions.

Schema