Validate Rule Public Api

Validate rule content without persisting a rule.

Use this to check Sigma YAML or SQL payloads before calling POST /rules.
For Sigma rules, send content as a YAML string. For SQL-based types, send
content as an object with query, schedule, and type-specific fields.
The alias rule_content is accepted in place of content.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params

Request model for public rule validation without create-time requirements.

string
enum
required
Allowed:
string | object
required

Rule content payload (YAML for Sigma, object for SQL-like rule types).

Optional title used for validation context only

Optional description used for validation context only

Headers
string
required

Your API Key ID

string

Your API Key Secret

Responses

Language
Credentials
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json