Correlation - Validate Correlation Rule

URI

https://164.99.19.131:8443/SentinelRESTServices/correlation/validateRuleLG

Supported Methods

POST

Given a correlation Rule/LG expresson, indicate if it is valid or not. If it is not, provide the line and column where the syntax is invalid.

Authentication

Authentication Types
Sentinel Permissions Needed

URL Parameters

None.

Success Codes

Fault Codes

Request Data

Object type: The rule lg filter
The rule lg filter and other rule parameters that need to be validated
FieldRequiredDescription
actionsfalseThe list of actions associated with this rule.
activefalseThe rule is an active rule or not.
deployedfalseThe rule is deployed or not.
rulelgtrueThe correlation rule expression that needs to be validated
updatetimefalse The time to initiate an action when a rule fires

Response Data

Object type: The validation status for rule lg expression
The validation status for rule lg expression
FieldDescription
ColumnIf the rule lg expression is not valid, then this field shows the column number of the error in the expression.
LineIf the rule lg expression is not valid, then this field shows the line number of the error in the expression.
ValidWhether the rule lg expression is valid or not.

Sample Request

POST correlation/validateRuleLG
{"rulelg":"filter(1=1)"}
Sample Response for application/json
Status: 200
{"Valid":"true","Line":"0","Column":"0"}


Sample Request

POST correlation/validateRuleLG
{"rulelg":"filter(1=1"}
Sample Response for application/json
Status: 200
{"Valid":"false","Line":"1","Column":"11"}