alert_overview_page

Queries

Detailed alert overview for a specific alert. Returns comprehensive information including policy, event type, transaction counts, bytes, duration, file details, destination IP, application info, and more.

Response

Returns AlertOverviewPageResponse

Arguments

Name	Description
start_time - Long!	The time frame start time in epoch milliseconds.
end_time - Long!	The time frame end time in epoch milliseconds.
alert_id - Long!	The alert ID to retrieve the overview for.

QUERY

query ALERTS {
ALERTS {
  alert_overview_page(start_time: "123456789", end_time: "123456789", alert_id: "123456789") {
    entries(limit: 10, filter_by: { status: { in: ["example"] }, host_name: { in: ["server.example.com"] } }, order_by: [{ total_transactions: ASC, total_bytes: ASC, duration: ASC }]) {
      alert_id
      policy
      event_type
      event_type_name
      first_known_attempt
      last_known_attempt
      allowed_transactions
      total_transactions
    }
  }
}
}

RESPONSE

{
"data": {
  "ALERTS": {
    "alert_overview_page": {
  "entries": [{
    "alert_id": 123,
    "policy": 123,
    "event_type": 123,
    "event_type_name": "example_value",
    "first_known_attempt": 123
  }]
}
  }
}
}