What this endpoint does

Batch-updates one or more classic alerts in a single request. The request body is a JSON array where each element targets one alert by ID and can set any combination of assignee, workflow status, and a freetext note. The API supports two status vocabularies — the recommended statusInPortal values (New, Resolved, Pending, Dismissed, Flag for Tuning) and a legacy status field — which are mapped together and cannot be set independently. Use the Alerts: Search endpoint to obtain alert IDs, or extract them from alert notification URLs.

Response data

Returns an object with success and error arrays, enabling partial success when updating multiple alerts in one call. Each success entry echoes the alert ID along with the updated status, assignee, and note (including author and timestamp). Status changes also include statusDate, statusChangeBy, and reviewDate timestamps. Each error entry contains the alert ID, a reason message, and an HTTP status code indicating the failure.