List formal alerts
list_anomaliesRetrieve formal alerts for lateness, overtime, unusual app-share, and timetable-fired deviations. Use this endpoint to identify employee scheduling and activity anomalies.
Instructions
List formal Alerts / deviations (POST /api/Alerts/Overall2).
Use for: lateness, overtime, unusual app-share, timetable-fired alerts. Do NOT use for idle/inactive duration — that is get_idle_summary (InactiveTime). Do NOT use for DLP keyword/USB policy hits — that is list_risks.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max rows to return (1–500). | |
| offset | No | Pagination offset (0-based). | |
| period | No | Relative period: today|yesterday|last_7_days|last_30_days (wins over date_from/date_to when set). | |
| compact | No | ||
| date_to | No | End datetime; date-only covers until 23:59:59 that day. | |
| user_id | No | User filter: AliasID as TreeviewUsers NodeType=1. | |
| group_id | No | Group filter: TreeviewUsers NodeType=14 (console group id). | |
| date_from | No | Start datetime YYYY-MM-DD or YYYY-MM-DD HH:MM:SS (full day if date-only). | |
| filter_key | No | Optional text filter passed to the Cloud API FilterKey. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||