Netography Detect and Respond - Threshold Overrides API
The Detect and Respond - Threshold Overrides API from Netography — 4 operation(s) for detect and respond - threshold overrides.
OpenAPI Specification
openapi: 3.0.0
info:
title: Netography (Vectra Fusion) Analytics Detect and Respond - Threshold Overrides API
version: '1.0'
description: Netography Fusion (now Vectra Fusion) REST API. Harvested from the provider's public API reference (docs.fusion.vectra.ai, formerly docs.netography.com).
x-apievangelist-source: https://docs.fusion.vectra.ai/api-reference (formerly docs.netography.com); harvested from embedded OpenAPI blocks
x-apievangelist-method: searched
x-apievangelist-generated: '2026-07-20'
servers:
- url: https://api.netography.com
description: Netography API
tags:
- name: Detect and Respond - Threshold Overrides
paths:
/api/v1/rule-engine/triggers:
get:
operationId: v1_threshold_overrides_get
summary: List Threshold Overrides
description: Returns an array of Threshold Overrides.
tags:
- Detect and Respond - Threshold Overrides
responses:
'200':
description: List of Requested Threshold Overrides
content:
application/json:
schema:
type: object
additionalProperties: false
properties:
meta:
type: object
additionalProperties: false
readOnly: true
properties:
code:
description: API response code. 200 ok, 400 you did something wrong. 500 we did something wrong
type: integer
readOnly: true
format: int32
count:
description: Number of documents retrieved or updated.
type: integer
readOnly: true
format: int32
data:
type: array
items:
allOf:
- description: Threshold Override Record
type: object
properties:
algorithm:
type: string
auto:
type: boolean
beta:
type: boolean
bypassdisplay:
type: boolean
bypassrule:
type: boolean
createdby:
type: string
default:
type: boolean
discards:
type: array
items:
type: string
ndm_score_confidence:
type: integer
ndm_score_threat:
type: integer
rollupperiod:
type: integer
sharedkey:
type: boolean
state:
type: string
thresholds:
type: array
items:
type: object
properties:
severity:
type: string
enum:
- low
- medium
- high
threshold:
type: string
track:
type: string
updateinterval:
type: integer
'400':
description: Bad Request. Typically due to a malformatted JSON body, or parameter values are not validating.
content:
application/json:
schema:
allOf:
- type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
- type: object
properties:
status: {}
name: {}
message: {}
'401':
description: Access token is missing or invalid
content:
application/json:
schema:
allOf:
- type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
- type: object
properties:
status: {}
name: {}
message: {}
'403':
description: Access is forbidden
content:
application/json:
schema:
allOf:
- type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
- type: object
properties:
status: {}
name: {}
message: {}
default:
description: Unknown Error Occurred
content:
application/json:
schema:
type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
put:
operationId: v1_threshold_overrides_put
summary: Create or Update Threshold Overrides
description: Create or update threshold overrides given the provided object.
tags:
- Detect and Respond - Threshold Overrides
requestBody:
description: Threshold overrides to be updated
required: true
content:
application/json:
schema:
description: Threshold Override Create or Update Config
type: object
required:
- algorithm
- rollupperiod
- thresholds
- track
- updateinterval
allOf:
- description: Threshold Override Record
type: object
properties:
algorithm:
type: string
auto:
type: boolean
beta:
type: boolean
bypassdisplay:
type: boolean
bypassrule:
type: boolean
createdby:
type: string
default:
type: boolean
discards:
type: array
items:
type: string
ndm_score_confidence:
type: integer
ndm_score_threat:
type: integer
rollupperiod:
type: integer
sharedkey:
type: boolean
state:
type: string
thresholds:
type: array
items:
type: object
properties:
severity:
type: string
enum:
- low
- medium
- high
threshold:
type: string
track:
type: string
updateinterval:
type: integer
responses:
'200':
description: List of Requested Threshold Overrides
content:
application/json:
schema:
type: object
additionalProperties: false
properties:
meta:
type: object
additionalProperties: false
readOnly: true
properties:
code:
description: API response code. 200 ok, 400 you did something wrong. 500 we did something wrong
type: integer
readOnly: true
format: int32
count:
description: Number of documents retrieved or updated.
type: integer
readOnly: true
format: int32
data:
type: array
items:
allOf:
- description: Threshold Override Record
type: object
properties:
algorithm:
type: string
auto:
type: boolean
beta:
type: boolean
bypassdisplay:
type: boolean
bypassrule:
type: boolean
createdby:
type: string
default:
type: boolean
discards:
type: array
items:
type: string
ndm_score_confidence:
type: integer
ndm_score_threat:
type: integer
rollupperiod:
type: integer
sharedkey:
type: boolean
state:
type: string
thresholds:
type: array
items:
type: object
properties:
severity:
type: string
enum:
- low
- medium
- high
threshold:
type: string
track:
type: string
updateinterval:
type: integer
'400':
description: Bad Request. Typically due to a malformatted JSON body, or parameter values are not validating.
content:
application/json:
schema:
allOf:
- type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
- type: object
properties:
status: {}
name: {}
message: {}
'401':
description: Access token is missing or invalid
content:
application/json:
schema:
allOf:
- type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
- type: object
properties:
status: {}
name: {}
message: {}
'403':
description: Access is forbidden
content:
application/json:
schema:
allOf:
- type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
- type: object
properties:
status: {}
name: {}
message: {}
default:
description: Unknown Error Occurred
content:
application/json:
schema:
type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
delete:
operationId: v1_threshold_overrides_delete
summary: Delete All Threshold Overrides
description: Deletes custom threshold overrides.
tags:
- Detect and Respond - Threshold Overrides
responses:
'204':
description: An empty array
'400':
description: Bad Request. Typically due to a malformatted JSON body, or parameter values are not validating.
content:
application/json:
schema:
allOf:
- type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
- type: object
properties:
status: {}
name: {}
message: {}
'401':
description: Access token is missing or invalid
content:
application/json:
schema:
allOf:
- type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
- type: object
properties:
status: {}
name: {}
message: {}
'403':
description: Access is forbidden
content:
application/json:
schema:
allOf:
- type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
- type: object
properties:
status: {}
name: {}
message: {}
default:
description: Unknown Error Occurred
content:
application/json:
schema:
type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
/api/v1/rule-engine/triggers/algorithms/{algorithm}:
get:
operationId: v1_threshold_overrides_algorithm_get
summary: List Threshold Overrides for Algorithm
description: Returns an array of Threshold Overrides for the specified algorithm.
tags:
- Detect and Respond - Threshold Overrides
parameters:
- name: algorithm
in: path
required: true
description: The algorithm to fetch threshold overrides for.
schema:
type: string
responses:
'200':
description: List of Requested Threshold Overrides
content:
application/json:
schema:
type: object
additionalProperties: false
properties:
meta:
type: object
additionalProperties: false
readOnly: true
properties:
code:
description: API response code. 200 ok, 400 you did something wrong. 500 we did something wrong
type: integer
readOnly: true
format: int32
count:
description: Number of documents retrieved or updated.
type: integer
readOnly: true
format: int32
data:
type: array
items:
allOf:
- description: Threshold Override Record
type: object
properties:
algorithm:
type: string
auto:
type: boolean
beta:
type: boolean
bypassdisplay:
type: boolean
bypassrule:
type: boolean
createdby:
type: string
default:
type: boolean
discards:
type: array
items:
type: string
ndm_score_confidence:
type: integer
ndm_score_threat:
type: integer
rollupperiod:
type: integer
sharedkey:
type: boolean
state:
type: string
thresholds:
type: array
items:
type: object
properties:
severity:
type: string
enum:
- low
- medium
- high
threshold:
type: string
track:
type: string
updateinterval:
type: integer
'400':
description: Bad Request. Typically due to a malformatted JSON body, or parameter values are not validating.
content:
application/json:
schema:
allOf:
- type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
- type: object
properties:
status: {}
name: {}
message: {}
'401':
description: Access token is missing or invalid
content:
application/json:
schema:
allOf:
- type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
- type: object
properties:
status: {}
name: {}
message: {}
'403':
description: Access is forbidden
content:
application/json:
schema:
allOf:
- type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
- type: object
properties:
status: {}
name: {}
message: {}
default:
description: Unknown Error Occurred
content:
application/json:
schema:
type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
delete:
operationId: v1_threshold_overrides_algorithm_delete
summary: Delete Threshold Overrides for Algorithm
description: Deletes threshold overrides for the specified algorithm.
tags:
- Detect and Respond - Threshold Overrides
parameters:
- name: algorithm
in: path
required: true
description: The algorithm to delete threshold overrides for.
schema:
type: string
responses:
'204':
description: An empty array
'400':
description: Bad Request. Typically due to a malformatted JSON body, or parameter values are not validating.
content:
application/json:
schema:
allOf:
- type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
- type: object
properties:
status: {}
name: {}
message: {}
'401':
description: Access token is missing or invalid
content:
application/json:
schema:
allOf:
- type: object
required:
- status
- name
- message
additionalProperties: false
properties:
status:
description: "API response code: \n * 4xx - you did something dumb\n * 5xx - we did something dumb\n"
type: integer
readOnly: true
format: int32
name:
description: They type of error
type: string
readOnly: true
message:
description: description of the error
type: string
readOnly: true
- type: object
properties:
status: {}
name: {}
message: {}
'403':
# --- truncated at 32 KB (58 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/netography/refs/heads/main/openapi/netography-detect-and-respond-threshold-overrides-api-openapi.yml