keep_resolve_alert
Resolve a Keep alert by fingerprint; omit confirm for a dry-run preview, then set confirm to true to execute.
Instructions
Resolve an alert. POST /alerts/enrich?dispose_on_new_alert=true with enrichments status=resolved. Omit confirm for a dry-run preview. confirm must be the boolean true to execute.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"fingerprint": "<fingerprint>"
},
"name": "keep_resolve_alert"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| confirm | No | Set to the boolean true to execute the write. Omit this field for a dry-run preview. false and the string true are rejected. | |
| fingerprint | Yes | Keep alert fingerprint. | |
| dispose_on_new_alert | No | Keep query flag. Defaults to true so a new occurrence can drop this status. |