latestOpenAPI 3.1.02026-08-223321,1001.6 MB

2134ebffd1ef

Investigate Alert Event

Start an RCA investigation for an alert event.

This endpoint creates a new investigation session using ThinkingMode.DEEP (full RCA workflow) and automatically links it to the alert event.

Supports both v2 alert events (AlertEvent table) and legacy alerts (Alert table) for organizations like Pepsi that haven't migrated to the v2 schema.

Args: request: Request containing alert_event_id authorized_user: Authorized user with roles (for RBAC checks)

Returns: InvestigateAlertEventResponse containing session_id and alert_event_id

Raises: HTTPException: If alert event not found or user unauthorized

post/alerts/investigate

Request body

alert_event_idstring required

Response

Successful Response

session_idstring required
alert_event_idstring required