Skip to main content
Gets a list of actionable alerts by IDs/filters.
External DocumentationTo learn more, visit the Cybersixgill documentation.

​
Basic Parameters

ParameterDescription
Organization IDID of the organization that the alert belongs to. Required for multi-tenant organizations. Can be obtained using the List Organizations action.
Sort BySort by a field.
Sort OrderThe order by which to sort.
StatusThe status of the actionable alert.

​
Advanced Parameters

ParameterDescription
Alert Type IDThe ID of the alert type.
From DateGet actionable alerts starting from this date.
Is ReadFilter by the read field.
LimitThe size of the page to fetch.
OffsetPagination offset.
Threat LevelThe threat level of the actionable alert.
Threat TypeThe threat type of the actionable alert.
To DateGet actionable alerts ending in this date.

​
Example Output

[
	{
		"id": "testID",
		"threat_level": "imminent",
		"threats": [
			"exploit",
			"ddos"
		],
		"title": "actionable alert title",
		"content": "a lot of text",
		"read": true,
		"date": "2018-01-01 00:00:00",
		"user_id": "#12:0",
		"status": {
			"name": "in_treatment",
			"by_user": "#12:1"
		}
	}
]

​
Workflow Library Example

List Actionable Alerts with Cybersixgill and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop