Skip to main content

AlertSummaryEntry

The AlertSummaryEntry object.

Fields

NameDescription
threat_key - StringThe threat key identifier.
alert_id - LongThe alert ID.
event_type - LongThe event type identifier.
event_type_name - StringThe event type name
impacted_systems - LongCount of distinct impacted systems.
status - StringAlert status (e.g. ONGOING, STARTED, RESOLVED).
duration - LongDuration in seconds between first and last event.
last_known_attempt - LongEpoch seconds of the last known event.
transactions - LongTotal number of transactions.
first_known_attempt - LongEpoch seconds of the first known event.
alert_rule - LongAlert rule ID.
EXAMPLE
{
"threat_key": "example",
"alert_id": 123,
"event_type": 123,
"event_type_name": "example",
"impacted_systems": 123,
"status": "example",
"duration": 123,
"last_known_attempt": 123,
"transactions": 123,
"first_known_attempt": 123,
"alert_rule": 123
}