Alert tags help categorize and organize alerts for efficient triage and analysis.
Get all alert tags with pagination and filtering.
Query Parameters
Sort field and direction (e.g., tagName,asc)
Response
Returns an array of alert tag objects.
Hex color code for tag display
Whether tag is system-owned (cannot be deleted)
curl -X GET "https://your-utmstack-instance.com/api/utm-alert-tags?page=0&size=20" \
-H "Authorization: Bearer eyJhbGciOiJIUzUxMiJ9..."
[
{
"id": 1,
"tagName": "false-positive",
"tagColor": "#28a745",
"systemOwner": true
},
{
"id": 2,
"tagName": "high-priority",
"tagColor": "#dc3545",
"systemOwner": false
},
{
"id": 3,
"tagName": "investigated",
"tagColor": "#007bff",
"systemOwner": false
}
]
Get Alert Tag
Get a specific alert tag by ID.
Path Parameters
curl -X GET https://your-utmstack-instance.com/api/utm-alert-tags/1 \
-H "Authorization: Bearer eyJhbGciOiJIUzUxMiJ9..."
{
"id": 1,
"tagName": "false-positive",
"tagColor": "#28a745",
"systemOwner": true
}
Create Alert Tag
Create a new alert tag.
Request Body
Hex color code (e.g., #ff0000)
curl -X POST https://your-utmstack-instance.com/api/utm-alert-tags \
-H "Authorization: Bearer eyJhbGciOiJIUzUxMiJ9..." \
-H "Content-Type: application/json" \
-d '{
"tagName": "ransomware",
"tagColor": "#ff0000"
}'
{
"id": 10,
"tagName": "ransomware",
"tagColor": "#ff0000",
"systemOwner": false
}
Update Alert Tag
Update an existing alert tag.
Request Body
curl -X PUT https://your-utmstack-instance.com/api/utm-alert-tags \
-H "Authorization: Bearer eyJhbGciOiJIUzUxMiJ9..." \
-H "Content-Type: application/json" \
-d '{
"id": 10,
"tagName": "ransomware-detected",
"tagColor": "#cc0000"
}'
{
"id": 10,
"tagName": "ransomware-detected",
"tagColor": "#cc0000",
"systemOwner": false
}
Delete Alert Tag
Delete an alert tag. System-owned tags cannot be deleted.
Path Parameters
curl -X DELETE https://your-utmstack-instance.com/api/utm-alert-tags/10 \
-H "Authorization: Bearer eyJhbGciOiJIUzUxMiJ9..."