We manage multiple tenants with custom detection rules for specific use cases, I find no possibility to import/export custom detection rules between tenants, or a way to push custom detection rules to sub-tenants. Anyone that may have encountered the same problem and found a solution for this? Been looking at API capabilities, but has no capability specifically for this as far as I can tell.
Hi @mraeymaekers , we have our tags API here which allows you to GET a list of Tags and POST tags as desired https://docs.rapid7.com/insightidr/log-search-api/#tag/Manage-Alerts
A tag is another name for an action or an alert.
2 Likes
A tag is another name for an action or an alert.
Did not realize that! Good to know, I am going to try to add this to InsightIDR4Py