Summary

The disableAlert() mutation disables a legacy alert in a LogScale repository or view, stopping it from triggering further actions.

This mutation is deprecated. Use disableLegacyAlert() instead. LogScale will remove disableAlert() no earlier than version 1.273.

Syntax

graphql
disableAlert(
      input: DisableAlert!
   ): Boolean!

The input argument accepts a DisableAlert object and is required. Supply the unique identifier of the legacy alert to disable and the name of the associated view or repository. Use the query shown in the preceding Related section to retrieve the alert identifier. See the Input Parameters section for the full field list.

The mutation returns a non-null Boolean! value confirming whether the operation succeeded.

Example

Raw
graphql
mutation {
  disableAlert( input:
    { viewName: "humio",
      id: "abc123"
    } )
}
Mac OS or Linux (curl)
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "mutation {
  disableAlert( input:
    { viewName: \"humio\",
      id: \"abc123\"
    } )
}"
}
EOF
Mac OS or Linux (curl) One-line
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "mutation {
  disableAlert( input:
    { viewName: \"humio\",
      id: \"abc123\"
    } )
}"
}
EOF
Windows Cmd and curl
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql ^
    -H "Authorization: Bearer $TOKEN" ^
    -H "Content-Type: application/json" ^
    -d @'{"query" : "mutation { ^
  disableAlert( input: ^
    { viewName: \"humio\", ^
      id: \"abc123\" ^
    } ) ^
}" ^
} '
Windows Powershell and curl
powershell
curl.exe -X POST 
    -H "Authorization: Bearer $TOKEN"
    -H "Content-Type: application/json"
    -d '{"query" : "mutation {
  disableAlert( input:
    { viewName: \"humio\",
      id: \"abc123\"
    } )
}"
}'
    "$YOUR_LOGSCALE_URL/graphql"
Perl
perl
#!/usr/bin/perl

use HTTP::Request;
use LWP;

my $TOKEN = "TOKEN";

my $uri = '$YOUR_LOGSCALE_URL/graphql';

my $query = "mutation {
  disableAlert( input:
    { viewName: \"humio\",
      id: \"abc123\"
    } )
}";
$query =~ s/\n/ /g;
my $json = sprintf('{"query" : "%s"}',$query);
my $req = HTTP::Request->new("POST", $uri );

$req->header("Authorization" => "Bearer $TOKEN");
$req->header("Content-Type" => "application/json");

$req->content( $json );

my $lwp = LWP::UserAgent->new;

my $result = $lwp->request( $req );

print $result->{"_content"},"\n";
Python
python
#! /usr/local/bin/python3

import requests

url = '$YOUR_LOGSCALE_URL/graphql'
mydata = r'''{"query" : "mutation {
  disableAlert( input:
    { viewName: \"humio\",
      id: \"abc123\"
    } )
}"
}'''

resp = requests.post(url,
                     data = mydata,
                     headers = {
   "Authorization" : "Bearer $TOKEN",
   "Content-Type" : "application/json"
}
)

print(resp.text)
Node.js
javascript
const https = require('https');

const data = JSON.stringify(
    {"query" : "mutation {
  disableAlert( input:
    { viewName: \"humio\",
      id: \"abc123\"
    } )
}"
}
);


const options = {
  hostname: '$YOUR_LOGSCALE_URL',
  path: 'graphql',
  port: 443,
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Content-Length': data.length,
    Authorization: 'BEARER ' + process.env.TOKEN,
    'User-Agent': 'Node',
  },
};

const req = https.request(options, (res) => {
  let data = '';
  console.log(`statusCode: ${res.statusCode}`);

  res.on('data', (d) => {
    data += d;
  });
  res.on('end', () => {
    console.log(JSON.parse(data).data);
  });
});

req.on('error', (error) => {
  console.error(error);
});

req.write(data);
req.end();
Example Responses
Success (HTTP Response Code 200 OK)
json
{
  "data": {
    "disableAlert": true
  }
}

Input Parameters

Provide the unique identifier of the legacy alert to disable and the name of the associated view or repository. Use the repositories() query shown in the preceding Related section to retrieve alert identifiers.

Table: DisableAlert Input Datatype

ParameterTypeRequiredDefaultStabilityAvailabilityDescription
idStringyes Long-Term The unique identifier of the alert.
viewNameRepoOrViewNameyes Long-Term The name of the view of the alert.

Returned Values

The mutation returns a non-null Boolean! value. A value of true confirms the alert was successfully disabled.