Alert Dismissal Error response via API

[LLibarios]

Anyone have experience using the Prisma Cloud API with dismissing alert, i've been testing the but always getting 404 or 400 response, check parameters below

url = "https://api.prismacloud.io/alert/dismiss"

payload = {

                        "alerts": [param.get("alert_id")],

                        "dismissalTimeRange": {

                            'type': 'absolute',

                            'value': {

                                'startTime': 0,

                                'endTime': end_time

                            }

                        },

                        "filter": {

                            "timeRange": {

                                'type': 'absolute',

                                'value': {

                                    'startTime': 0,

                                    'endTime': end_time

                                }

                            },

                            "limit": "1",

                            "detailed": "true"

                        }

                    }

been looking on the community but not found any good solutions.

[lpingali · Accepted solution]

Dismissal Range is for the new snooze feature to specify the time range for keeping the alert in dismissed status. 

If you are dismissing without snoozing, then Dismissal Range is not needed.

[ebeuerlein]

Policies array might be required - here's mine that works and it seems to be the only major thing missing from your payload.  Also make sure it's a POST.

Payload: 
  { 
   "alerts":[ 
      "P-1424086"
   ],
   "policies":[ 

   ],
   "filter":{ 
      "filters":[ 
         { 
            "operator":"=",
            "name":"alert.status",
            "value":"open"
         },
         { 
            "operator":"=",
            "name":"policy.type",
            "value":"config"
         }
      ],
      "timeRange":{ 
         "type":"relative",
         "value":{ 
            "amount":1,
            "unit":"week"
         }
      }
   },
   "dismissalNote":"Test2"
}

[LLibarios]

Thanks on your response,

I've solve it via removing "dismissalTimeRange" on parameter. i don't have any idea why it does not work having that on parameters.

Thanks!

[lpingali · Accepted solution]

Dismissal Range is for the new snooze feature to specify the time range for keeping the alert in dismissed status. 

If you are dismissing without snoozing, then Dismissal Range is not needed.