Skip to content

Alerts History Schema

alert
Represents the alert details, including timestamp, ID, status, and group information.
alertDataUrl

Link to the incident page (e.g., https://coralogix.com/#/insights?id=76c411be-gg4d-4fb1-a987-5fce042deaaf).

groupingKey

Used as the deduplication key.

groups
List of alert groups associated with the alert (including priority and key-values).
groups[n]
keyValues
Key-value pairs associated with the alert group; e.g., "team": "{{alert.groups[0].keyValues.resource.attributes.Team}}" or "service":"{{alert.groups[0].keyValues.coralogix.metadata.subsystemName}}"
resource
attributes
Team
coralogix
metadata
subsystemName
id

Unique identifier of the alert. Use it to create an alert URL in your notification; e.g., "alert_url": "https://teamname-prod.app.eu2.coralogix.com/#/alerts/{{alert.id}}"

priority

Priority level of the alert group (e.g., "P1").

status

Current status of the alert (e.g., "Triggered").

timestamp

The timestamp indicating when the alert was triggered.

alertDef
Defines the alert configuration, including name, description, groupings, incident settings, and priority.
alertVersionId

The version ID associated with the alert definition.

createdTime

The timestamp when the alert definition was created.

description

A textual description of the alert definition.

entityLabels

Labels associated with the alert definition (e.g., host, region).

groupByKeys

List of keys by which the alert is grouped (e.g., host, region).

id

The unique identifier of the alert definition.

incidentSettings
Configuration related to incident settings (e.g., retriggering period).
notifyOn

Notification setting for the alert definition (e.g., "Triggered").

name

Name of the alert definition (e.g., "CPU Usage Alert").

priority

Priority level of the alert definition (e.g., P1).

retriggeringPeriod

Time in minutes after which the alert can be retriggered.

status

Current status of the alert definition.

type

Type of the alert (e.g., "metricThreshold").

updatedTime

The timestamp when the alert definition was last updated.