APIAnomaly
List findings
List findings (SOC triage queue); start_time/end_time bound the finding's last active bucket (last_bucket).
GET
/anomaly/findingsList findings (SOC triage queue); start_time/end_time bound the finding's last active bucket (last_bucket).
Query Parameters
offset?integer
Number of items to skip before returning results.
Format
int32Range
0 <= valueDefault
0limit?integer
Maximum number of items to return per page.
Format
int32Range
0 <= value <= 20Default
10status?array<>
severity?array<>
detector?array<>
subject_type?string
What a finding is about: a person or a running agent.
Value in
- "user"
- "agent_instance"
subject_id?array<string>
metric?array<string>
start_time?string
Format
date-timeend_time?string
Format
date-timesort?string
Default
"recent"Value in
- "recent"
- "severity"
- "score"
sort_order?string
Default
"desc"Value in
- "asc"
- "desc"
Response Body
application/json
application/json
curl -X GET "https://example.com/anomaly/findings"{ "items": [ { "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "detector": "llm_cost_spike", "family": "baseline", "grain": "hour", "metric": "string", "dimension": "string", "dimension_display": "string", "subject_type": "user", "subject_id": "string", "subject_display_name": "string", "bucket": "2019-08-24T14:15:22Z", "last_bucket": "2019-08-24T14:15:22Z", "severity": "low", "status": "open", "observed": 0.1, "evidence": { "baseline": { "window_days": 0, "n": 0, "mean": 0.1, "stddev": 0.1, "median": 0.1, "mad": 0.1, "mean_ad": 0.1 }, "scoring": { "robust_score": 0.1, "z_score": 0.1, "dispersion_basis": "mad", "threshold": 0.1, "floor": 0.1, "abs_delta": 0.1, "rel_factor": 0.1 }, "peer": { "rank": 0.1, "n": 0 }, "slice": { "hour": 0, "dow_class": "string", "fell_back": true }, "prior": { "max": 0.1, "p90": 0.1, "exceeded": true }, "novelty": { "keys": [ "string" ], "keys_display": [ "string" ], "new_for_org": true, "dormancy_days": 0 }, "threshold": { "floor": 0.1 }, "off_hours": { "min_calls": 0.1, "history_days": 0 } }, "created_at": "2019-08-24T14:15:22Z", "updated_at": "2019-08-24T14:15:22Z", "status_changed_at": "2019-08-24T14:15:22Z" } ], "meta": { "total": 0, "offset": 0, "limit": 0 }}{ "code": "bad_request", "message": "string", "validation_errors": [ { "field": "string", "message": "string", "rule": "string" } ]}