Sign in
latestOpenAPI 3.1.02026-08-223321,1001.6 MB

2134ebffd1ef

Investigation V2

Unified investigation endpoint that accepts thinking_mode parameter.

The thinking_mode parameter determines how the investigation is conducted:

  • AUTO: Uses message classifier to determine RCA vs CHAT investigation
  • DEEP: Forces RCA (root cause analysis) investigation
  • FAST: Forces CHAT (exploratory) investigation

The endpoint does not hardcode the session mode; it uses thinking_mode to determine behavior.

post/v2/investigation/new

Request body

user_uuidstring nullable
config_namestring required
user_messagestring required
incident_timestring required
incident_timezonestring required
relevant_context_idsstring[] nullable
output_typesInvestigationOutputTypeEnum[] nullable
trigger_type'manual' | 'auto-trigger' | 'slack_mention' | 'slack_dm' | 'slack_investigate_command' | 'slack_channel_join_auto_trigger' | 'slack_message_auto_trigger' | 'topology_explore' | 'alert_chat' | 'alert_event_manual_investigate' | 'alert_event_anomaly_detected_investigate' | 'proactive_followup' | 'alert_story' | 'alert_summary' | 'api' | 'mcp' | 'channel_agent' | 'deep_wiki' | 'autoresearch' | 'incident_monitor_postmortem'
parent_session_idstring nullable
mode'rca' | 'chat' | 'triage' | 'alert_story'
thinking_mode'auto' | 'deep' | 'fast' | 'lightning'

Determines the investigation depth and approach.

  • AUTO: Use message classifier to determine RCA vs CHAT
  • DEEP: Force RCA (root cause analysis) investigation
  • FAST: Force CHAT (exploratory) investigation
  • LIGHTNING: Fast, tool-rich investigation with tight iteration cap. Uses the union of all tools from fast + deep configs with a speed-focused prompt.
knowledge_version_idstring nullable
additional_instructionsstring nullable

Response

Successful Response

session_idstring required
user_chat_idstring required
system_chat_idstring required