> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List Aggregated Alerts

Retrieve aggregated alert data based on specified queries.

<Note>
  External Documentation

  To learn more, visit the [CrowdStrike documentation](https://falcon.us-2.crowdstrike.com/documentation/page/adf2fd07/incident-detection-and-alert-monitoring-apis#f11dbc1a).
</Note>

## Parameters

<div className="integrations-table">
  | Parameter         | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
  | ----------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
  | Aggregate Queries | A list of queries by which to aggregate the retrieved alerts.<br /><br />For example:<br /><br /><pre><code>\[<br />  \{<br />    "date\_ranges": \[<br />      \{<br />        "from": "string",<br />        "to": "string"<br />      }<br />    ],<br />    "exclude": "string",<br />    "field": "string",<br />    "filter": "string",<br />    "from": 0,<br />    "include": "string",<br />    "interval": "string",<br />    "max\_doc\_count": 0,<br />    "min\_doc\_count": 0,<br />    "missing": "string",<br />    "name": "string",<br />    "q": "string",<br />    "ranges": \[<br />      \{<br />        "From": 0,<br />        "To": 0<br />      }<br />    ],<br />    "size": 0,<br />    "sort": "string",<br />    "sub\_aggregates": \[<br />      null<br />    ],<br />    "time\_zone": "string",<br />    "type": "string"<br />  }<br />]</code></pre> |
  | Include Hidden    | Select to allow hidden alerts to be retrieved.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
</div>

## Example Output

```json theme={"dark"}
{
	"errors": [
		{
			"code": 0,
			"id": "string",
			"message": "string"
		}
	],
	"meta": {
		"pagination": {
			"limit": 0,
			"offset": 0,
			"total": 0
		},
		"powered_by": "string",
		"query_time": 0,
		"trace_id": "string",
		"writes": {
			"resources_affected": 0
		}
	},
	"resources": [
		{
			"buckets": [
				{
					"count": 0,
					"from": 0,
					"key_as_string": "string",
					"string_from": "string",
					"string_to": "string",
					"sub_aggregates": [
						null
					],
					"to": 0,
					"value": 0,
					"value_as_string": "string"
				}
			],
			"name": "string",
			"sum_other_doc_count": 0
		}
	]
}
```

## Workflow Library Example

[List Aggregated Alerts with Crowdstrike and Send Results Via Email](https://library.blinkops.com/workflows/list-aggregated-alerts-with-crowdstrike-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/list-aggregated-alerts-with-crowdstrike-and-send-results-via-email/canvas" />
</div>