JUMP TOLogRhythm Admin Service APIlistsGet List DetailsgetCreate or Update List SummarypostGet List Details and ItemsgetAdd Items to ListpostRemove Items From ListdeleteidentitiesGet IdentitiesgetUpdate IdentitiesputGet Identity Display Names *getGet Identity Identifiers *getUpdate or Create Bulk IdentitiespostSearch Identities *postSearch Identity Summaries *postGet IdentitygetUpdate IdentityputUpdate Identity StatusputUpdate Identifier StatusputAdd Identifier to IdentitypostMerge Two IdentitiespostGet Identity PhotogetGet Merged Identitiesgetidentity listsGet Identity From ListgetentitiesList EntitiesgetUpdate EntitypostCreate Entities From FilepostGet Entity DetailsgetCreate Hosts From FilepostCreate Networks From FileposthostsFetch Hosts DetailsgetCreate Host RecordpostBatch Update HostsputFetch HostsgetChange Status of HostputAdd Host Role and UserpostDelete Host Role or UserdeleteGet Host DetailsgetUpdate HostputUpdate Host IdpostRemove Host IdentifiersdeletenetworksList NetworksgetCreate NetworkpostBatch Update NetworksputGet Network DetailsgetUpdate NetworkputusersGet User PermissionsgetList User RecordsgetCreate New UserpostList All User LoginsgetList User PrivilegesgetGet User Login DetailsgetCreate User LoginpostGet User DetailsgetCreate User ProfilepostGet User Profile DetailsgetGet User Profile SummarygetClone User ProfilepostGet User Profile Details by IdgetDelete User ProfiledeleteGet User Profile PrivilegesgetGet User Profile Log SourcesgetknowledgebaseList Message Source TypesgetCreate Message Source TypepostGet Message Source Type DetailsgetUpdate Message Source Type DetailsputDelete Message Source TypedeleteList MPE PoliciesgetList MPE Policies summary.getList Log Source Virtualization TemplatesgetCreate a new log source virtualization template.postEdit a log source virtualization template.putAssociate virtual log source with a log source virtualization template.patchGet Log Source Virtualization Template DetailgetDissociate LSV items from an LSV template.deleteGet Log Source Virtualization Template DetailsgetCreate log source virtualization template item.postDelete log source virtualization template items.deleteEdit log source virtualization template item.putGet Log Source Virtualization Template DetailgetList Privilegesgetnotification groupsList Notification GroupsgetCreate Notification GrouppostUpdate Notification GroupputDelete Notification GroupdeleteList Users in Notification GroupgetAdd Users to Notification GrouppostRemove Users From Notification GroupdeletelogsourcesList Accepted Log SourcesgetCreate Log SourcepostGet Log Source DetailsgetUpdate Log SourceputChange Status of logsourcesputUpdate existing Logsource to enable virtualization.putList Pending Log SourcesgetCreate Pending Log SourcepostDelete Pending LogSourcedeleteReject multiple pending logsources in batch.putAccept multiple pending logsources in batch.putGet Pending Log Source DetailsgetGet matching logsources for a pending log source to associategetAccept pending LogSource by IDputRejects a Pending Log Source.putAssociate a pending Log Source.putagentsList Accepted AgentsgetCreate Agent RecordpostUpdate Agent RecordputList Summary of Accepted AgentsgetGet Agent By IdgetList Agent Log SourcesgetList Pending Agent RequestsgetDelete Pending AgentsdeleteAssociate pending agentputAccept pending agentputGet Pending AgentgetReject Pending AgentputlicensesGet Licensed Entitlements *getList licensesgetmperulesFetch MPE Rule based on the provided MPE Rule IdgetRetire/Activate MPE Rule based on the provided MPE Rule IdpatchFetch MPE Rules based on the provided query parametersgetCreate MPE RulepostEdit MPE RuleputbeatsGet beat detail by beat Id available in the systemgetUpdate beat details of a beat available in the systemputGet all beats details available in the system.getCreate a new beat.postFetch Beats TemplategetFetch Beat TypesgetUpdates heartbeat of beatspatchUpdate status of beats based on beat IDs available in the system.patchopenCollectorsGet all beats details available in the system associated to the given open collector id.getUpdates Open Collector HeartbeatpatchCreates a new open collector.postList all permissible open collectorgetUpdate status of one or multiple open collectors in the available in the system based on open collector Id.patchGet open collector by open collector id.getUpdates an existing open collector.putlocationsProvides all available locations.getProvides location details by location ID.getmpePoliciesCreate a new MPE policy.postDelete MPE policies.deleteReturns the MPE Policy based on the Id.getEdit an MPE Policy.putReturns the list of MPE rules by MPE policy id.getGet an MPE Rule on the basis of MPE Policy Id and MPE Rule Id.getUpdate an MPE Rule on the basis of MPE Policy Id and MPE Rule Id.putmessagesourcedateformatsList Date FormatsgetGet Message Source Date FormatgetLogRhythm AIE Drill Down API/drilldown/{alarmID}Get Drill-Down Logs and Summaryget/drilldown/{alarmID}/summaryGet Drill-Down SummarygetLogRhythm Alarm APIalarmsGet alarm details by IDgetUpdate Alarm Status and RBPpatchUpdate Alarm CommentspostGet alarm history details by ID and filter criteriagetGet alarm details using filter criteriagetGet alarm summary by alarmIdgetGet events by alarmIdgetGet Alarm UrlgetLogRhythm Case APICase SummaryList CasesgetCreate CasepostGet CasegetUpdate CaseputChange Case Status *putCase MetricsGet Case MetricsgetUpdate Case MetricsputCase EvidenceList EvidencegetAdd File EvidencepostAdd Alarm EvidencepostAdd Log EvidencepostAdd User Event EvidencepostAdd Note EvidencepostGet EvidencegetUpdate EvidenceputDelete EvidencedeleteGet Evidence ProgressgetDownload File EvidencegetGet Evidence Logs BytesgetList User EventsgetGet Logs IndexgetUpdate Logs IndexputPlaybooksList PlaybooksgetCreate PlaybookpostClone PlaybookpostGet PlaybookgetUpdate PlaybookputUpdate Playbook (Partial)patchDelete PlaybookdeletePlaybook ProceduresList ProceduresgetUpdate ProceduresputGet ProceduregetPlaybook AttachmentsList AttachmentsgetGet AttachmentgetLink AttachmentputUnlink AttachmentdeleteDownload AttachmentgetPlaybook Import / ExportImport PlaybookpostExport PlaybookgetFilesUpload FilepostGet WhitelistgetGet File ProgressgetCase TagsAdd Case Tags *putRemove Case Tags *putCase CollaboratorsGet Case CollaboratorsgetUpdate Case CollaboratorsputAdd Case Collaborators *putRemove Case Collaborators *putChange Case Owner *putAssociated CasesList Associated CasesgetAdd Associated CasespostRemove Associated CasesdeleteCase HistoryList Case History *getCase PlaybooksList PlaybooksgetAdd PlaybookpostGet PlaybookgetUpdate PlaybookputRemove PlaybookdeleteCase Playbook ProceduresList ProceduresgetGet ProceduregetUpdate ProcedureputList Procedures (All Cases)getCase Playbook AttachmentsList AttachmentsgetGet AttachmentgetDownload AttachmentgetGlobal HistoryList Global History *getLogs IndexesList Logs Indexes (All Cases)getTagsList TagsgetCreate TagpostGet TaggetDelete TagdeleteCapabilitiesGet CapabilitiesgetUsersList People *getGet Person *getList Collaborators *getList Owners *getFeature FlagsGet Feature Flags *getMaintenanceRun Log Evidence Maintenance *postLogRhythm Metrics APILog VolumeGet Log Volume DetailspostTTLGet TTL detailsgetLogRhythm Search APISearch APIInitiate SearchpostSearch ResultpostGet Feature Flags *get https://example.com/feature-flagsRetrieve the current feature flags of the Case API. * unsupported endpoint