Sign in
latestOpenAPI 3.1.02026-08-223321,1001.6 MB

2134ebffd1ef

Alert Chat Investigation

Create a fast CHAT-mode investigation for alert exploration.

Returns session_id and user_chat_id immediately. A background task runs a lightweight LLM call to check whether the user's message implies alert console filters (time range, status, search query). If filters are detected the stream END event carries them; otherwise the full agent investigation pipeline executes.

post/alerts/chat

Request body

user_uuidstring nullable
config_namestring required
user_messagestring required
incident_timestring required
incident_timezonestring required
relevant_context_idsstring[] nullable
output_typesInvestigationOutputTypeEnum[] nullable
trigger_type'manual' | 'auto-trigger' | 'slack_mention' | 'slack_dm' | 'slack_investigate_command' | 'slack_channel_join_auto_trigger' | 'slack_message_auto_trigger' | 'topology_explore' | 'alert_chat' | 'alert_event_manual_investigate' | 'alert_event_anomaly_detected_investigate' | 'proactive_followup' | 'alert_story' | 'alert_summary' | 'api' | 'mcp' | 'channel_agent' | 'deep_wiki' | 'autoresearch' | 'incident_monitor_postmortem'
parent_session_idstring nullable
mode'rca' | 'chat' | 'triage' | 'alert_story'
thinking_mode'auto' | 'deep' | 'fast' | 'lightning'

Determines the investigation depth and approach.

  • AUTO: Use message classifier to determine RCA vs CHAT
  • DEEP: Force RCA (root cause analysis) investigation
  • FAST: Force CHAT (exploratory) investigation
  • LIGHTNING: Fast, tool-rich investigation with tight iteration cap. Uses the union of all tools from fast + deep configs with a speed-focused prompt.
knowledge_version_idstring nullable
additional_instructionsstring nullable

Response

Successful Response

session_idstring required
user_chat_idstring required
system_chat_idstring required