API call that allows to close ELK alert

Elastic Stack Elasticsearch
1

Hi Team, I am looking for API call that allows to close an alert or multiple alerts - that are generated in Security Module.

We are not leveraging Elastic Security or agent. We have KQL rule-based alerts and looking for specific API that allows to close ELK alert(s).

2

Hello,

By close you mean mute? You do not close alerts, what you can close are cases, but it is not sure if you are using it.

For alerts you can just mute them, the endpoints for the Alerts API can be found here.

3

Hi, thank you for the help, however, in Elastic - Security -> Alerts -> We have an option to mark the alerts as "Open" or "Acknowledged" or "Closed" or even merge them to current case or create a new case.

Here the mute option is same as closing the Alert?