LiteSOC icon

LiteSOC

Track security events and manage alerts with LiteSOC. Severity is automatically assigned based on event type.

Actions7

Alert → Mark Safe

AI-generated

Summary

Mark an alert as safe (false positive) by specifying its Alert ID and optionally adding internal notes explaining the reason.

Inputs

  • Alert ID (required) — The UUID of the alert to mark as safe
  • Internal Notes — Reason for marking this alert as safe (max 2000 characters)

Output shape

a single JSON object representing the updated alert after the mark safe action

The operation sends a PATCH request to the endpoint /alerts/{alertId} with action 'mark_safe' and any provided internal notes. The response is returned as the alert object updated with a safe status. Errors and rate limits may be reported as node execution errors.

Examples

Example 1: Mark an alert as safe with an explanation

Provide the alert's UUID in 'Alert ID' and optionally add internal notes explaining why it is marked safe.

Links

Discussion