Get Alerts for an Application

POST 
/appid/api/v2/app/:id/alerts

Get details of alerts in an application by application ID.

Note: You need investigateApplicationRql feature with Read permission to access this endpoint. Verify if your permission group includes this feature using the Get Permission Group by ID endpoint. You can also check this in the Prisma Cloud console by ensuring that Investigate > Applications is enabled.

Request

Path Parameters

id stringrequired

id of application

application/json

Body

required

filters object[]
Array [
op string
attribute string
value object
]
nextPageToken string

Responses

200

OK

application/json

Schema

Schema

id string
createdAt integer
metadata object
property name* string[]
Array [
string
]
assets object[]
Array [
unifiedAssetId string
externalAssetId string
type stringrequired
assetType string
name string
cloudType string
region string
apiId string
alerts object[]
Array [
unifiedAssetId string
alertId string
policy object
policyId string
name string
severity string
policyType string
]
vuln object[]
Array [
id stringrequired
score number
severity string
]
vulnCountBySeverity object
critical integer
high integer
medium integer
low integer
findings object[]
Array [
id string
name string
findingTypes string[]
]
findingCountByType object[]
Array [
type string
value integer
]
]
summary object
cloudTypes string[]
assetCount object
total integer
byAlertSeverity object
critical integer
high integer
medium integer
low integer
informational integer
byVulnSeverity object
critical integer
high integer
medium integer
low integer
alertCountByPolicyType object[]
Array [
type string
value integer
]
alertCountBySeverity object
critical integer
high integer
medium integer
low integer
informational integer
vulnCountBySeverity object
critical integer
high integer
medium integer
low integer
findingCountByType object[]
Array [
type string
value integer
]

Example (from schema)

{
  "id": "string",
  "createdAt": 0,
  "metadata": {},
  "assets": [
    {
      "unifiedAssetId": "string",
      "externalAssetId": "string",
      "type": "string",
      "assetType": "string",
      "name": "string",
      "cloudType": "string",
      "region": "string",
      "apiId": "string",
      "alerts": [
        {
          "unifiedAssetId": "string",
          "alertId": "string",
          "policy": {
            "policyId": "string",
            "name": "string",
            "severity": "string",
            "policyType": "string"
          }
        }
      ],
      "vuln": [
        {
          "id": "string",
          "score": 0,
          "severity": "string"
        }
      ],
      "vulnCountBySeverity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0
      },
      "findings": [
        {
          "id": "string",
          "name": "string",
          "findingTypes": [
            "string"
          ]
        }
      ],
      "findingCountByType": [
        {
          "type": "string",
          "value": 0
        }
      ]
    }
  ],
  "summary": {
    "cloudTypes": [
      "string"
    ],
    "assetCount": {
      "total": 0,
      "byAlertSeverity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0,
        "informational": 0
      },
      "byVulnSeverity": {
        "critical": 0,
        "high": 0,
        "medium": 0,
        "low": 0
      }
    },
    "alertCountByPolicyType": [
      {
        "type": "string",
        "value": 0
      }
    ],
    "alertCountBySeverity": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 0,
      "informational": 0
    },
    "vulnCountBySeverity": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 0
    },
    "findingCountByType": [
      {
        "type": "string",
        "value": 0
      }
    ]
  }
}

Loading...