Search alerts

Returns alerts most recently published first. Duplicates are excluded by default because on live traffic they are the bulk of the rows and none is independently actionable - pass includeDuplicates=true or filter on a shape to see them. textContains is the free text search, over the message and everything anybody has written on the alert; use shape to find every occurrence of the same fault.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Query Params
int64

Restrict to alerts owned by this user

string

Restrict to one channel, e.g. General, Finance, Support

string

Restrict to one host

boolean
Defaults to false

Include alerts folded into another as duplicates. Off by default.

string

Substring match over the alert's info payload - the parsed error code and stack frames, and the whole history including comments and resolutions. The fault wording it holds is masked, so use textContains to search for the words of the fault itself. Unindexable, so it reads every row the other filters leave behind: pair it with a published window.

string

Only alerts that changed at or after this time. ISO 8601. For polling what moved.

int32
Defaults to 100
boolean

Only alerts that have an owner but nobody assigned - somebody is accountable but no work is under way

int32
Defaults to 0
string

Restrict to alerts this person is accountable for

string

Published from, inclusive. ISO 8601.

string

Published to, exclusive. ISO 8601.

severity
array of strings

Restrict to these severities. Repeatable. CRITICAL, HIGH, MEDIUM, LOW or INFO.

severity
string

Restrict to one deduplication shape - every occurrence of the same fault

status
array of strings

Restrict to these statuses. Repeatable. NEW, ACKNOWLEDGED, ASSIGNED, CLOSED or DUPLICATE.

status
string

Substring match over the alert's message and its info payload - what searching usually means. Finds the text wherever it was seen: in the fault itself, in a stack frame, or in something somebody wrote on the alert. Prefer this to infoContains for anything read off a screen, because the fault wording in the info payload has identifiers and long words masked out of it and an error constant such as REGULA_INTERACTION_ERROR is not in there to be found. Two unindexable substring matches, so pair it with a published window.

string

Restrict to one distributed trace

boolean

Restrict to alerts nobody is assigned to

Responses

Language
Credentials
Bearer
JWT
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json