Skip to main content

List individual alerts​

Returns a list of individual alerts.

Each alert is associated with a cause, which represents the issue that generated the alert, and each cause belongs to a general alert alert type. Some alert types may be associated with multiple causes.

The following table lists the Clumio alert types:

Alert TypeDescription
policy_violatedAn entity's scheduled backup failed.
restore_failedAn entity restore failed.
file_restore_failedA file restore failed.
tag_conflictAn EBS volume has multiple associated tags with different protection policies applied at the tag level.
aws_account_disconnectedThe connection between Clumio Cloud Connector and the user's AWS account failed.
enc_key_inaccessibleAn issue is blocking encryption key access.
Query Parameters
  • limit int64

    Limits the size of the response on each page to the specified number of items.

  • start string

    Sets the page number used to browse the collection. Pages are indexed starting from 1 (i.e., ?start=1).

  • sort string

    Returns the list of individual alerts in the order specified. Set sort to the name of the sort field by which to sort in ascending order. To sort the list in reverse order, prefix the field name with a minus sign (-). Only one field may be sorted at a time.

    The following table lists the supported sort fields for this resource and the operations that can be performed on the field:

    Sort FieldDescription
    raised_timestampSorts the individual alerts in chronological ascending (oldest first) order by when the alert was raised. For example, ?sort=raised_timestamp
    updated_timestampSorts the individual alerts in chronological ascending (oldest first) order by when the alert was last updated. For example, ?sort=updated_timestamp
    cleared_timestampSorts the individual alerts in chronological ascending (oldest first) order by when the alert was cleared, either automatically by Clumio or manually by a Clumio user. For example, ?sort=cleared_timestamp
    If a sort order is not specified, the individual alerts are sorted by "raised_timestamp" in chronological descending (newest first) order.
  • filter string

    Narrows down the results to only the items that satisfy the filter criteria. The following table lists the supported filter fields for this resource and the filter conditions that can be applied on those fields:

    FieldFilter ConditionDescription
    type$inThe general alert category. Alert types are listed in the Alert Type table. For example, ?filter={"type":{"$in":["policy_violated"]}}
    status$inThe individual alert status. Set to "active" to display only the individual alerts that are in the active status. Set to "cleared" to display only the individual alerts that have been cleared, either automatically by Clumio or manually by a Clumio user. For example, ?filter={"status":{"$in":["cleared"]}}
    severity$inThe alert severity level. Values include "error".
    raised_timestamp$lte, $gteThe timestamp value of when the alert was raised. Represented in RFC-3339 format. For example, ?filter={"raised_timestamp":{"$lte":"1985-04-12T23:20:50Z"}}
    updated_timestamp$lte, $gteThe timestamp value of when the alert was last updated. Represented in RFC-3339 format. The alert is updated whenever there is a new occurrence of the same alert within the same entity. For example, ?filter={"updated_timestamp":{"$lte":"1985-04-12T23:20:50Z"}}
    cleared_timestamp$lte, $gteThe timestamp value of when the alert was cleared, either automatically by Clumio or manually by a Clumio user. Represented in RFC-3339 format. For example, ?filter={"cleared_timestamp":{"$lte":"1985-04-12T23:20:50Z"}}
    consolidated_alert_id$eqThe Clumio-assigned ID of the consolidated alert associated with the individual alert. For example, ?filter={"consolidated_alert_id":{"$eq":"d78cd819-ab15-48e2-acea-3f94d3a9f2fb"}}
    primary_entity.id$eqThe system-generated ID of the primary entity affected by the alert. For example, ?filter={"primary_entity.id":{"eq":"503765b4-62af-536d-c7ab-c5850a123194"}}
    primary_entity.type$eqThe type of primary entity affected by the alert. Examples of primary entity types include "aws_ebs_volume", "aws_environment". For example, ?filter={"primary_entity.type":{"$eq":"aws_ebs_volume"}}
    primary_entity.value$containsThe value or name associated with the primary entity affected by the alert. For example, ?filter={"primary_entity.value":{"$contains":"prod"}}
    parent_entity.id and parent_entity.type$eq The system-generated ID and type of the parent entity that is associated with the primary entity affected by the alert. Both filters must be used together. For example, ?filter={"parent_entity.id":{"$eq":"9c2934fc-ff4d-11e9-8e11-76706df7fe01"},"parent_entity.type":{"$eq":"aws_environment"}}

    For more information about filtering, refer to the Filtering section of this guide.
  • embed string

    Embeds the details of each associated resource. Set the parameter to one of the following embeddable links to include additional details associated with the resource.

    Embeddable LinkDescription
    read-consolidated-alertEmbeds the associated consolidated alert in the response. For example, ?embed=read-consolidated-alert
    For more information about embedded links, refer to the Embedding Referenced Resources section of this guide.
Responses

Success

Schema
  • _embedded object

    Embedded responses related to the resource.

  • items object[]

    A collection of requested items.

  • _etag string

    The ETag value.

  • _links object

    URLs to pages related to the resource.

  • _self object

    The HATEOAS link to this resource.

  • href string

    The URI for the referenced operation.

  • templated boolean

    Determines whether the "href" link is a URI template. If set to true, the "href" link is a URI template.

  • type string

    The HTTP method to be used with the "href" link for the referenced operation.

  • update-consolidated-alert object

    A resource-specific HATEOAS link.

  • href string

    The URI for the referenced operation.

  • templated boolean

    Determines whether the "href" link is a URI template. If set to true, the "href" link is a URI template.

  • type string

    The HTTP method to be used with the "href" link for the referenced operation.

  • active_entity_count int64

    The number of currently active individual alerts associated with the consolidated alert.

  • cause string

    The issue that generated the alert. Each alert cause is associated with an alert type.

  • cleared_entity_count int64

    The number of cleared individual alerts associated with the consolidated alert.

  • cleared_timestamp string

    The timestamp of when the consolidated alert was cleared, if ever. Represented in RFC-3339 format. If this alert has not been cleared, this field will have a value of null. A consolidated alert goes into "cleared" status when all of its associated individual alerts are in "cleared" status or when a Clumio user manually clears it.

  • details object

    Additional information about the consolidated alert.

  • cause string

    A brief description of the condition that caused the alert. Examples include "Size Limit Exceeded" and "Insufficient Cloud Connector Capacity".

  • type string

    The general alert category. Examples include "Policy Violated" and "Restore Failed".

  • id string

    The Clumio-assigned ID of the consolidated alert.

  • notes string

    A record of user-provided information about the alert.

  • parent_entity object

    The entity associated with or affected by the alert.

  • id string

    A system-generated ID assigned to this entity.

  • type string

    Type is mostly an asset type or the type of Entity. Some examples are "restored_file", "aws_ebs_volume", etc.

  • value string

    A system-generated value assigned to the entity. For example, if the primary entity type is "aws_ebs_volume", then the value is the name of the EBS.

  • raised_timestamp string

    The timestamp of when the consolidated alert was initially raised. Represented in RFC-3339 format.

  • severity string

    The alert severity level. Values include "error" and "warning".

  • status string

    The consolidated alert status. A consolidated alert is in "active" status if one or more of its associated individual alerts is in "active" status. A consolidated alert goes into "cleared" status when all of its associated individual alerts are in "cleared" status or when a Clumio user manually clears it.

  • type string

    The general alert category. An alert type may be associated with multiple alert causes. Examples of alert types include "tag_conflict" and "policy_violated". Refer to the Alert Type table for a complete list of alert types.

  • updated_timestamp string

    The timestamp of when the consolidated alert was last updated. Represented in RFC-3339 format. Raising a new individual alert will update its associated consolidated alert.

  • _links object

    URLs to pages related to the resource.

  • _first object

    The HATEOAS link to the first page of results.

  • href string

    The URI for the referenced operation.

  • templated boolean

    Determines whether the "href" link is a URI template. If set to true, the "href" link is a URI template.

  • type string

    The HTTP method to be used with the "href" link for the referenced operation.

  • _last object

    The HATEOAS link to the last page of results.

  • href string

    The URI for the referenced operation.

  • templated boolean

    Determines whether the "href" link is a URI template. If set to true, the "href" link is a URI template.

  • type string

    The HTTP method to be used with the "href" link for the referenced operation.

  • _next object

    The HATEOAS link to the next page of results.

  • href string

    The URI for the referenced operation.

  • templated boolean

    Determines whether the "href" link is a URI template. If set to true, the "href" link is a URI template.

  • type string

    The HTTP method to be used with the "href" link for the referenced operation.

  • _prev object

    The HATEOAS link to the previous page of results.

  • href string

    The URI for the referenced operation.

  • templated boolean

    Determines whether the "href" link is a URI template. If set to true, the "href" link is a URI template.

  • type string

    The HTTP method to be used with the "href" link for the referenced operation.

  • _self object

    The HATEOAS link to this resource.

  • href string

    The URI for the referenced operation.

  • templated boolean

    Determines whether the "href" link is a URI template. If set to true, the "href" link is a URI template.

  • type string

    The HTTP method to be used with the "href" link for the referenced operation.

  • current_count int64

    The number of items listed on the current page.

  • filter_applied string

    The filter used in the request. The filter includes both manually-specified and system-generated filters.

  • limit int64

    The maximum number of items displayed per page in the response.

  • sort_applied string

    The sort order used in the request.

  • start string

    The page number used to get this response. Pages are indexed starting from 1 (i.e., "start": "1").

  • total_count int64

    The total number of items, summed across all pages.

  • total_pages_count int64

    The total number of pages of results.

GET /alerts/individual

Authorization

Request

Click Edit to configure Base URL
https://us-west-2.api.clumio.com
Bearer Token
limit — query
start — query
sort — query
filter — query
embed — query
curl -L -X GET 'https://us-west-2.api.clumio.com/alerts/individual' \
-H 'Accept: application/api.clumio.individual-alerts=v1+json' \
-H 'Authorization: Bearer <TOKEN>'