Validate Rule Sql
POST/api/v1/rules/validate
Validate a detection query (SELECT ... FROM ...) without creating a rule.
Returns any syntax errors or validation issues found.
Request
Responses
- 200
- 401
- 403
- 422
- default
Successful Response
No valid session: the credentials are missing, invalid or expired, or the account behind them is disabled or blocked
Refused: the session lacks the action this route checks, or its account must replace an issued password first. A SCIM route answers a refused action in the RFC 7644 error envelope
Validation Error
Problem details (RFC 9457)