AlertDefinitionDto
Alert definition
Properties
Alert name
Type of alert
Possible values are: per-event/windowed
Map of severity(CRITICAL, IMMEDIATE, WARNING, INFO) and threshold value
Time period that indicates how frequently the alert should be evaluated (in milliseconds)
Condition for triggering the alert
Possible values are: GREATER_THAN , GREATER_THAN_EQUAL , LESS_THAN , LESS_THAN_EQUAL , EQUAL
Additional information associated with the alert
List of tags associated with this alert
Alert ID
Lists the RCA parameters if Root Cause Analysis (RCA) is enabled, otherwise it’s null
Indicates whether the alert is enabled or disabled
Notification configs associated with the alert
Custom fields or all logs corresponding to the alert included in the alert notification
Email recipients for the alert notifications
Alert description
Unique ID associated with the org
Alert recommendations for troubleshooting
ID of the content pack that the alert belongs to if the alert is part of a content pack
Map of severity(CRITICAL, IMMEDIATE, WARNING, INFO) to the list of notification recipients (email and webhook)
End time for snoozing the alert (in milliseconds)
Start time for snoozing the alert (in milliseconds)
Source of the alert
Possible values are: USER_DEFINED
Minimum threshold for triggering the alert
JSON Example
{
"alertType": "per-event/windowed",
"name": "string",
"operator": "GREATER_THAN",
"periodInMillis": 0,
"query": {
"constraints": {
"constraints": "QueryConstraint Object",
"operator": "AND"
},
"name": "string"
},
"severityThreshold": {
"key": 0
}
}
Parameter To
Create Alert
Update Alert By Put
Returned By
Create Alert
Get Alerts
Update Alert By Put
Get Alert By ID