v1
latestOpenAPI 3.1.02026-07-26363186558.0 KBthreatintelligence
Get a list of alerts that meet the filter criteria.
get/v1beta/projects/{project}/alerts
Path parameters
projectstring required
Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
Query parameters
filterstring
Optional. Filter criteria.
Supported fields for filtering include:
- audit.create_time
- audit.creator
- audit.update_time
- audit.updater
- detail.data_leak.discovery_document_ids
- detail.data_leak.severity
- detail.detail_type
- detail.initial_access_broker.discovery_document_ids
- detail.initial_access_broker.severity
- detail.insider_threat.discovery_document_ids
- detail.insider_threat.severity
- finding_count
- priority_analysis.priority_level
- relevance_analysis.confidence
- relevance_analysis.relevance_level
- relevance_analysis.relevant
- severity_analysis.severity_level
- state
Examples:
- detail.detail_type = "initial_access_broker"
- detail.detail_type != "data_leak"
- detail.insider_threat.severity = "HIGH"
- audit.create_time >= "2026-04-03T00:00:00Z" AND audit.create_time < "2026-04-06T00:00:00Z"
- state = "NEW" OR state = "TRIAGED"
- severity_analysis.severity_level = "SEVERITY_LEVEL_CRITICAL"
orderBystring
Optional. Order by criteria in the csv format: "field1, field2 desc" or "field1, field2" or "field1 asc, field2". If a field is specified without asc or desc, ascending order is used by default. Supported fields for ordering are identical to those supported for filtering.
Examples:
- audit.create_time desc
- audit.update_time asc
- audit.create_time desc, severity_analysis.severity_level desc
pageTokenstring
Optional. Page token to retrieve the next page of results.
pageSizeinteger
Optional. Page size.
Headers
x-goog-user-projectstring required
Your organization's project ID
Response
Successful operation