AlertSummaryEntry
The AlertSummaryEntry object.
Fields
| Name | Description |
|---|---|
threat_key - String | The threat key identifier. |
alert_id - Long | The alert ID. |
event_type - Long | The event type identifier. |
event_type_name - String | The event type name |
impacted_systems - Long | Count of distinct impacted systems. |
status - String | Alert status (e.g. ONGOING, STARTED, RESOLVED). |
duration - Long | Duration in seconds between first and last event. |
last_known_attempt - Long | Epoch seconds of the last known event. |
transactions - Long | Total number of transactions. |
first_known_attempt - Long | Epoch seconds of the first known event. |
alert_rule - Long | Alert rule ID. |
EXAMPLE
{
"threat_key": "example",
"alert_id": 123,
"event_type": 123,
"event_type_name": "example",
"impacted_systems": 123,
"status": "example",
"duration": 123,
"last_known_attempt": 123,
"transactions": 123,
"first_known_attempt": 123,
"alert_rule": 123
}