---
title: "Get Multiple Fingerprint Alert Audit"
method: POST
path: "/alerts/audit"
tags: ["alerts"]
---

# Get Multiple Fingerprint Alert Audit

`POST /alerts/audit`

Get alert timeline audit trail for multiple fingerprints

## Request body

- string[]

## Response `200`

Successful Response

- AlertAuditDto[]
  - `id` string, required
  - `timestamp` string, date-time, required
  - `fingerprint` string, required
  - `action` 'alert was triggered' | 'alert acknowledged' | 'alert automatically resolved' | 'alert automatically resolved by API' | 'alert manually resolved' | 'alert status manually changed' | 'alert status changed by API' | 'alert status undone' | 'alert enriched by workflow' | 'alert enriched by mapping rule' | 'alert was deduplicated' | 'alert was assigned with ticket' | 'alert was unassigned from ticket' | 'alert ticket was updated' | 'alert enrichments disposed' | 'alert deleted' | 'alert enriched' | 'alert un-enriched' | 'a comment was added to the alert' | 'a comment was removed from the alert' | 'Alert is in maintenance window' | 'A comment was added to the incident', required — An enumeration.
  - `user_id` string, required
  - `description` string, required

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/keephq/apis/keep-api.md) · [All operations](https://skmtc.net/keephq/apis/keep-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/keephq/keep-api/versions/bb4a0896091f/schema)