Github user justinleet commented on the issue:

    https://github.com/apache/metron/pull/824
  
    ## Patch alert and status
    Create a metaalerts and get the GUID for the following steps.
    
    ### Attempt to update status field
    ```
    /api/v1/update/patch
    
    curl -X PATCH --header 'Content-Type: application/json' --header 'Accept: 
application/json' -d '{
      "guid": "00eae5ba-6137-4601-ae3a-fbf0003e58e6",
      "index": "metaalert_index",
      "patch": [
        {
          "op": "replace"
            , "path": "/status"
            , "value": "failure"
        }
      ],
      "sensorType": "metaalert"
    }' 'http://node1:8082/api/v1/update/patch'
    ```
    
    Should return 
    ```
    {
      "responseCode": 500,
      "message": "Meta alert patches are not allowed for /alert or /status 
paths.  Please use the add/remove alert or update status functions instead.",
      "fullMessage": "IllegalArgumentException: Meta alert patches are not 
allowed for /alert or /status paths.  Please use the add/remove alert or update 
status functions instead."
    }
    ```
    
    ### Attempt to update the alert list
    ```
    /api/v1/update/patch
    
    curl -X PATCH --header 'Content-Type: application/json' --header 'Accept: 
application/json' -d '{
      "guid": "00eae5ba-6137-4601-ae3a-fbf0003e58e6",
      "index": "metaalert_index",
      "patch": [
        {
          "op": "replace"
            , "path": "/alert"
            , "value": [{
                "alertOne":"test"
            },
            {
                 "alertTwo":"test"
            }
            ]
        }
      ],
      "sensorType": "metaalert"
    }' 'http://node1:8082/api/v1/update/patch'
    ```
    
    Should return 
    ```
    {
      "responseCode": 500,
      "message": "Meta alert patches are not allowed for /alert or /status 
paths.  Please use the add/remove alert or update status functions instead.",
      "fullMessage": "IllegalArgumentException: Meta alert patches are not 
allowed for /alert or /status paths.  Please use the add/remove alert or update 
status functions instead."
    }
    ```


---

Reply via email to