External DocumentationTo learn more, visit the Reco documentation.
Parameters
| Parameter | Description |
|---|---|
| Created After | Return alerts with after the given date and time. |
| Created Before | Return alerts with before the given date and time. |
| Policy ID | Return alerts with the following policyId. |
| Risk Levels | Return alerts with these risk types. Returns all risk levels as default. |
| Statuses | Return alerts with the following status. Returns all statuses as default. |
Example Output
{
"alerts": [
{
"id": "<string>",
"policyId": "<string>",
"description": "<string>",
"aggregationRulesToKeys": {
"aggregationRuleToKey": [
{
"aggregationRule": {
"aggregationKeyJsonataQuery": "<string>"
},
"aggregationKey": {
"stringKey": "<string>"
}
},
{
"aggregationRule": {
"aggregationDuration": "<string>"
},
"aggregationKey": {
"timeKey": "<string>"
}
}
]
},
"status": "<string>",
"riskLevel": "<string>",
"policyViolations": [
{
"id": "<string>",
"policyId": "<string>",
"jsonData": "<string>",
"createdAt": "2025-02-05T19:58:12.037201Z",
"policyStatusOnViolationCreation": "<string>",
"policyRiskLevelOnViolationCreation": "<string>",
"dataSource": "<string>"
}
],
"createdAt": "2025-02-05T19:58:11.581577Z",
"updatedAt": "2025-02-05T19:58:11.577753Z",
"extractionSource": "<string>",
"instanceId": "<string>"
},
{
"id": "<string>",
"policyId": "<string>",
"description": "<string>",
"aggregationRulesToKeys": {
"aggregationRuleToKey": []
},
"status": "<string>",
"riskLevel": "<string>",
"policyViolations": [],
"createdAt": "2025-02-05T19:58:11.581577Z",
"updatedAt": "2025-02-05T19:58:11.577753Z",
"extractionSource": "<string>",
"instanceId": "<string>"
}
]
}
Workflow Library Example
List Alerts with Reco and Send Results Via Email