Update an EDR configuration
PATCH/config/integrations/edr/configurations/:id
Merges the supplied config.integration and config.investigation values into the stored configuration.
The provider cannot be changed; the stored provider is used and any provider in the body is ignored (it may be omitted). Omitted secrets keep their stored values. Send the body as JSON. An empty body, or a body without config, succeeds and changes nothing except name when supplied. A config.integration object that carries no recognised settings (after zero-valued Tanium options are dropped) returns 422. Array settings (domain_fallback_list, bulk_single_device_retry_statuses) are merged element by element with the stored array, so a shorter array cannot shrink the stored one and an empty array changes nothing.
For tanium_cloud the body may also carry tokenExpiresAt (ISO 8601 date-time or null). For
sentinelone the API token expiry is refreshed from the vendor after a save; a failure there is ignored.
The same 400, 409 and 422 conditions as create apply.
Required role: superadmin or admin.
Request
Responses
- 200
- 400
- 401
- 403
- 404
- 409
- 422
The updated configuration.
Validation failed (for example a value over its maximum length or of the wrong type).
No token, or the token is invalid or expired. The body is {message}: No auth token provided when no token is sent, otherwise the token check's message (jwt expired, jwt malformed, invalid signature, invalid token, jwt signature is required). Send Authorization: Bearer <token> exactly: the server drops the first seven characters of the header and reads the rest as the token, so a different scheme or an extra space fails. If Authorization is absent, the server reads a token field in the body, then a token query parameter, then x-access-token. Routes that validate query fields reject ?token= with 400 InvalidQuery.
The token's role is not allowed for this operation, or the token's scopes exclude the route
(Scope not allowed by token).
No configuration with this id.
The request conflicts with the current state of the resource.
The request could not be processed, for example an id that is not a valid object id.