> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List Alerts

List and query all alerts.

<Note>
  External Documentation

  To learn more, visit the [Chronicle documentation](https://cloud.google.com/chronicle/docs/reference/search-api#listalerts).
</Note>

## Parameters

<div className="integrations-table">
  | Parameter         | Description                                            |
  | ----------------- | ------------------------------------------------------ |
  | Alert Time After  | Query by the time of the alert.                        |
  | Alert Time Before | Query by the time of the alert.                        |
  | Page Size         | The amount of alerts that will be returned every page. |
</div>

## Example Output

```json theme={"dark"}
{
	"alerts": [
		{
			"asset": {
				"hostname": "host1234.altostrat.com"
			},
			"alertInfos": [
				{
					"name": "Antimalware Action Taken",
					"sourceProduct": "Microsoft ASC",
					"severity": "HIGH",
					"timestamp": "2020-11-15T07:21:35Z",
					"rawLog": "<omitted for simplicity>",
					"uri": [
						"<omitted for simplicity>"
					],
					"udmEvent": {
						"metadata": {
							"eventTimestamp": "2020-11-15T07:21:35Z",
							"eventType": "SCAN_FILE",
							"vendorName": "Microsoft",
							"productName": "ASC",
							"productEventType": "Antimalware Action Taken",
							"description": "<omitted for simplicity>",
							"urlBackToProduct": "<omitted for simplicity>",
							"ingestedTimestamp": "2020-11-30T19:01:11.486605Z"
						},
						"principal": {
							"hostname": "host1234.altostrat.com"
						},
						"target": {
							"file": {
								"fullPath": "<omitted for simplicity>"
							}
						},
						"securityResult": [
							{
								"threatName": "WS.Reputation.1",
								"ruleName": "AntimalwareActionTaken",
								"summary": "Antimalware Action Taken",
								"description": "<omitted for simplicity>",
								"severity": "HIGH"
							}
						]
					}
				}
			]
		}
	],
	"userAlerts": [
		{
			"user": {
				"email": "john.doe@altostrat.com"
			},
			"alertInfos": [
				{
					"name": "<omitted for simplicity>",
					"sourceProduct": "Office 365 Security and Compliance",
					"timestamp": "2020-11-15T13:15:00Z",
					"rawLog": "<omitted for simplicity>",
					"uri": [
						"<omitted for simplicity>"
					],
					"udmEvent": {
						"metadata": {
							"eventTimestamp": "2020-11-15T13:15:00Z",
							"eventType": "EMAIL_TRANSACTION",
							"vendorName": "Microsoft",
							"productName": "Office 365 Security and Compliance",
							"productEventType": "<omitted for simplicity>",
							"description": "<omitted for simplicity>",
							"ingestedTimestamp": "2020-11-30T18:29:36.164727Z"
						},
						"securityResult": [
							{
								"ruleName": "ThreatManagement",
								"summary": "Email reported by user as malware or phish",
								"description": "<omitted for simplicit>",
								"severity": "INFORMATIONAL"
							}
						],
						"network": {
							"email": {
								"from": "Webinars\\\\u003cwebinars@example.com\\\\u003e",
								"to": [
									"john.doe@altostrat.com"
								]
							}
						}
					}
				}
			]
		}
	]
}
```

## Workflow Library Example

[List Alerts with Chronicle and Send Results Via Email](https://library.blinkops.com/workflows/list-alerts-with-chronicle-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/list-alerts-with-chronicle-and-send-results-via-email/canvas" />
</div>
