keep_search_alerts
Search alerts using CEL expressions with limit, offset, and sorting options to find matching alerts and page through results.
Instructions
Search alerts with CEL. POST /alerts/query with QueryDto (cel, limit, offset, sort_by, sort_dir). This is Keep's current query path. POST /alerts/search is the older SearchEngine route and is not used.
Tool call template
This tool declares no required parameters. Add optional parameters from the input schema as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {},
"name": "keep_search_alerts"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| cel | No | CEL filter, for example status == 'firing'. | |
| limit | No | ||
| offset | No | ||
| sort_by | No | ||
| sort_dir | No |