Import/export custom detection rules

We manage multiple tenants with custom detection rules for specific use cases, I find no possibility to import/export custom detection rules between tenants, or a way to push custom detection rules to sub-tenants. Anyone that may have encountered the same problem and found a solution for this? Been looking at API capabilities, but has no capability specifically for this as far as I can tell.

Hi @mraeymaekers , we have our tags API here which allows you to GET a list of Tags and POST tags as desired https://docs.rapid7.com/insightidr/log-search-api/#tag/Manage-Alerts

A tag is another name for an action or an alert.

2 Likes

A tag is another name for an action or an alert.

Did not realize that! Good to know, I am going to try to add this to InsightIDR4Py :grinning: :clap: :+1: