What this endpoint does

This operation retries a previously failed Auto Sigma job, resubmitting it for Sigma rule generation. Use this endpoint when a job's status is FAILED (as reported by the Get Sigma Job or Get Sigma Jobs endpoints) to attempt processing again without needing to create a new job. Retrying a job that has already completed successfully or is currently running will not reprocess it. The job ID is obtained from the Create Auto Sigma Job endpoint when initially creating the job, or from the Get Sigma Jobs endpoint when listing all jobs.

Response data

The response contains a retried boolean field indicating whether the job was successfully resubmitted for processing. A value of true means the job has been queued for reprocessing; false means the retry was not performed (typically because the job is not in a FAILED state). After a successful retry, poll the Get Sigma Job endpoint to monitor the job's progress through the RUNNING state until it reaches FINISHED or FAILED.