Alerts

Alert-based queries that analyze ongoing and historic security alerts, joining alert evaluations with tagged security transactions from Z_FABRIC.

Available Queries

Query	Description	Time Range
alert_overview_page	Detailed alert overview for a specific alert. Returns comprehensive information including policy, event type, transaction counts, bytes, duration, file details, destination IP, application info, and more.	N/A
alert_summary	Alert summary with filtering, having, and ordering support. Returns alert details including threat key, event type, duration, and transaction counts.	N/A

About This Domain

The Alerts domain provides access to alerts-related data and operations through GraphQL queries.

Usage Example

query {
  ALERTS {
    # Access queries from this domain
  }
}