# Logz.io Security rules API

**Canonical:** https://apis.io/apis/logz-io/logz-io-security-rules-api/  
**Provider:** Logz.io — https://apis.io/providers/logz-io/  
**Base URL:** https://api.logz.io/v1/search  
**Documentation:** https://api-docs.logz.io/docs/logz/search/

Logz.io Security rules API is one of 57 APIs that [Logz.io](https://apis.io/providers/logz-io/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 4 JSON Schema definitions. Tagged areas include Security Rules. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, a JSON-LD context, and 4 JSON Schemas.

Security rules help you connect the dots between your data sources and events that could indicate a security threat or breach. Your Cloud SIEM account comes pre-configured with security rules for different attack types and security use cases. These built-in rules are protected, and there are limitations on the changes that can be made to them. Pre-configured rules can be updated by adding notification endpoints (like email or Slack), changing trigger thresholds and severities, and adding tags, as described in detail in the endpoint. You can also create new security rules to supplement the built-in rules.

## Operations (9)

| Method | Path | Summary |
|---|---|---|
| POST | `/v2/security/rules` | Create a security rule |
| GET | `/v2/security/rules/{ruleId}` | Retrieve a security rule |
| PUT | `/v2/security/rules/{ruleId}` | Update a security rule |
| DELETE | `/v2/security/rules/{ruleId}` | Delete a security rule |
| POST | `/v2/security/rules/search` | Retrieve security rules |
| POST | `/v2/security/rules/{id}/enable` | Enable a rule |
| POST | `/v2/security/rules/{id}/disable` | Disable a rule |
| POST | `/v2/security/rules/bulk/update` | Bulk update security rules |
| POST | `/v2/security/rules/bulk/delete` | Bulk delete security rules |

## Machine-readable artifacts (26)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/logz-io/refs/heads/main/openapi/logz-io-security-rules-api-openapi.yml
- **Documentation** — https://api-docs.logz.io/docs/logz/search/
- **Documentation** — https://docs.logz.io/api/
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/logz-io/refs/heads/main/json-schema/logz-io-search-request-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/logz-io/refs/heads/main/json-schema/logz-io-log-document-schema.json
- **JSONLD** — https://raw.githubusercontent.com/api-evangelist/logz-io/refs/heads/main/json-ld/logz-io-context.jsonld
- **Documentation** — https://api-docs.logz.io/docs/logz/archive-logs/
- **Documentation** — https://api-docs.logz.io/docs/logz/drop-filters/
- **Documentation** — https://api-docs.logz.io/docs/logz/get-all-alerts/
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/logz-io/refs/heads/main/json-schema/logz-io-alert-rule-schema.json
- **Documentation** — https://api-docs.logz.io/docs/logz/endpoints/
- **Documentation** — https://api-docs.logz.io/docs/logz/manage-users/
- **Documentation** — https://api-docs.logz.io/docs/logz/manage-api-tokens/
- **Documentation** — https://api-docs.logz.io/docs/logz/manage-time-based-log-accounts/
- **Documentation** — https://api-docs.logz.io/docs/logz/metrics-gateway/
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/logz-io/refs/heads/main/json-schema/logz-io-metric-sample-schema.json
- **Documentation** — https://api-docs.logz.io/docs/logz/grafana-alerting/
- **Documentation** — https://api-docs.logz.io/docs/logz/perses/
- **Documentation** — https://api-docs.logz.io/docs/logz/security-rules/
- **Documentation** — https://api-docs.logz.io/docs/logz/connect-to-cloud-trail/
- **Documentation** — https://api-docs.logz.io/docs/logz/parsing/
- **Documentation** — https://api-docs.logz.io/docs/logz/lookups/
- **Documentation** — https://api-docs.logz.io/docs/logz/insights/
- **Documentation** — https://api-docs.logz.io/docs/logz/deployments/
- **Documentation** — https://api-docs.logz.io/docs/logz/snapshots/
- **Documentation** — https://api-docs.logz.io/docs/logz/retrieve-audit-trail/

## Other Logz.io APIs (12)

- [Logz.io Alerts API](https://apis.io/apis/logz-io/logz-io-alerts-api/)
- [Logz.io Archive logs API](https://apis.io/apis/logz-io/logz-io-archive-logs-api/)
- [Logz.io Associated accounts API](https://apis.io/apis/logz-io/logz-io-associated-accounts-api/)
- [Logz.io Authentication groups API](https://apis.io/apis/logz-io/logz-io-authentication-groups-api/)
- [Logz.io Connect to CloudTrail API](https://apis.io/apis/logz-io/logz-io-connect-to-cloudtrail-api/)
- [Logz.io Connect to S3 Buckets API](https://apis.io/apis/logz-io/logz-io-connect-to-s3-buckets-api/)
- [Logz.io Dashboards create new API](https://apis.io/apis/logz-io/logz-io-dashboards-create-new-api/)
- [Logz.io Dashboards create new folder API](https://apis.io/apis/logz-io/logz-io-dashboards-create-new-folder-api/)
- [Logz.io Dashboards delete API](https://apis.io/apis/logz-io/logz-io-dashboards-delete-api/)
- [Logz.io Dashboards delete folder API](https://apis.io/apis/logz-io/logz-io-dashboards-delete-folder-api/)
- [Logz.io Dashboards get all API](https://apis.io/apis/logz-io/logz-io-dashboards-get-all-api/)
- [Logz.io Dashboards get all folders API](https://apis.io/apis/logz-io/logz-io-dashboards-get-all-folders-api/)

## Tags

Security Rules

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/logz-io/logz-io-security-rules-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/logz-io/.