list_alerts
List Event Management alerts (em_alert) with operational filters. Defaults to alerts that are not Closed, most severe first.
Instructions
List Event Management alerts (em_alert) with operational filters. Defaults to alerts that are not Closed, most severe first.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max results (default 25, max 200) | |
| query | No | Additional encoded query appended with ^ (e.g. "short_descriptionLIKEdisk") | |
| state | No | Open | Reopen | Flapping | Closed. Default: everything except Closed. Use "all" for no state filter. | |
| source | No | Filter by event source (exact match) | |
| cmdb_ci | No | Filter by CI sys_id | |
| severity | No | Severity value or comma-separated list: 1 Critical, 2 Major, 3 Minor, 4 Warning, 5 OK, 0 Clear | |
| unassigned | No | true: only alerts with no assignment group and no assignee | |
| acknowledged | No | Only acknowledged (true) or unacknowledged (false) alerts | |
| assignment_group | No | Filter by assignment group sys_id | |
| without_incident | No | true: only alerts not yet linked to an incident |