search_alerts
Search Wazuh security alerts using full-text queries to investigate threats and monitor security events across your environment.
Instructions
Perform full-text search across Wazuh security alerts
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | Search query string | |
| limit | No | Maximum number of alerts to return (1-100) | |
| offset | No | Pagination offset | |
| level | No | Minimum rule severity level | |
| agent_id | No | Filter by agent ID |