Get Active Advisor Recommendations for Account
advisor__get_active_rulesRetrieve active Advisor recommendations to identify issues affecting system availability, stability, performance, or security. Filter by impact, likelihood, category, and more to find critical problems.
Instructions
Get active Advisor Recommendations for your account that help identify issues affecting system availability, stability, performance, or security.
Use filters to find recommendations by impact level, likelihood, systems affected, workspace, tags, and automatic remediation availability. Higher impact/likelihood values indicate more critical issues.
Call examples: Standard call: {"impacting": true, "offset": 0, "limit": 20} High risk only: {"impacting": true, "impact": "3,4", "likelihood": "3,4"} Pagination: {"offset": 20, "limit": 20} With automatic remediation: {"has_automatic_remediation": true} Security and Performance categories: {"category": "2,4"} Reboot required: {"reboot": true} Sorted by total risk: {"sort": "-total_risk"} For workspaces 'workspace1': {"impacting": true, "groups": "workspace1"} For systems tagged 'database-servers': { "impacting": true, "tags": ["insights-client/group=database-servers"] }
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| impacting | No | Only show recommendations currently impacting systems. | |
| incident | No | Only show recommendations that cause incidents. | |
| has_automatic_remediation | No | Only show recommendations that have a playbook for automatic remediation. | |
| impact | No | Impact level filter as comma-separated string, Example: '1,2,3'. Accepted values: 1 (Low), 2 (Medium), 3 (High), 4 (Critical). Use only these exact values: 1, 2, 3, or 4. | |
| likelihood | No | Likelihood level filter as comma-separated string, Example: '1,2,3'. Accepted values: 1 (Low), 2 (Medium), 3 (High), 4 (Very High). Use only these exact values: 1, 2, 3, or 4. | |
| category | No | Recommendation category filter as comma-separated string, Example: '1,2,3'. Accepted values: 1 (Availability), 2 (Security), 3 (Stability), 4 (Performance). | |
| reboot | No | Filter recommendations that require a reboot to fix. | |
| sort | No | Sort field as comma-separated string. Example: '-total_risk,rule_id'. Available fields: category, description, impact, impacted_count, likelihood, playbook_count, publish_date, resolution_risk, rule_id, total_risk. Use '-' prefix for descending order. | -total_risk |
| offset | No | Pagination offset to skip specified number of results. Used with limit. | |
| limit | No | Pagination: Maximum number of results per page. | |
| groups | No | Filter based on workspace names. Comma separated list of workspace names.Used only when impacting=True. Example: 'workspace1,workspace2' | |
| tags | No | Filter based on system tags. Accepts a single tag or a comma-separated list.Used only when impacting=True. Tag format: 'namespace/key=value'. Example: 'satellite/group=database-servers,insights-client/security=strict' |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |