get_log_alert
Retrieve a single log alert's stored definition by ID, including enabled status, info, and raw keys, to inspect its configuration. Use after listing alerts.
Instructions
[READ] Get the stored definition of one alert. Use this after list_log_alerts.
Returns the same sanitized {id, name, enabled, info} projection as an list_log_alerts row plus 'raw_keys' — the sorted key names the appliance actually sent — so you can see what else the definition carries without this skill guessing at its shape. For when the alert fired, use get_log_alert_history. Read-only.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | Log Insight target name as spelled in ~/.vmware-log-insight/config.yaml. Omit to use that file's default_target — with no default configured, omitting it is an error that lists the configured names. | |
| alert_id | Yes | The alert id exactly as returned in an list_log_alerts row's 'id' field (not the alert's name). An empty or malformed id (anything with '/', '?', spaces, or '..') is refused before any call; an unknown id comes back as HTTP 404 (500 for an id that is not a UUID) on 8.18.7, reported as "copy an exact id", not "retry". |