latestOpenAPI 3.1.02026-08-223321,1001.6 MB

2134ebffd1ef

Triage Flow

Execute the full alert triage flow.

Args: request: TriageFlowRequest containing organization_id, integration, and query_string m2m_token: Machine-to-machine authentication token

Returns: TriageFlowResponse with success status and number of investigations started

post/cron/triage/trigger

Request body

organization_idstring required
integrationstring required
query_stringstring nullable
number_of_alerts_to_run_per_periodinteger
lookback_minutesinteger nullable
end_timestring date-time nullable
trigger_source'cron' | 'slack' | 'manual' | 'system' | 'webhook'

Enum for alert triage trigger sources.

Indicates what initiated an alert investigation.

skip_fetch_and_persistboolean
skip_anomaly_detectionboolean
skip_investigationboolean

Response

Successful Response

successboolean required
number_of_investigation_startedinteger required