APIAnomaly
List findings
List findings (SOC triage queue); start_time/end_time bound the finding's last active bucket (last_bucket).
GET
List findings (SOC triage queue); start_time/end_time bound the finding's last active bucket (last_bucket).
ApiKeyAuthheader
AuthorizationBearer <token>Bearer token authentication. Send an API key (a saai_api_-prefixed token) as Authorization: Bearer <token>.
Required permission
view_anomaly_detectionoffset?integerNumber of items to skip before returning results.
Format
int32Range
0 <= valueDefault
0limit?integerMaximum number of items to return per page.
Format
int32Range
0 <= value <= 256Default
10status?array<>severity?array<>detector?array<>subject_type?stringWhat a finding is about: a person or a running agent.
Value in
"user""agent_instance"subject_id?array<string>metric?array<string>start_time?stringFormat
date-timeend_time?stringFormat
date-timesort?stringDefault
"recent"Value in
"recent""severity""score"sort_order?stringDirection to sort results.
Default
"desc"Value in
"asc""desc"The request has succeeded.
application/json- response
A page of results together with its paging information.
items*array<>The items in this page.
meta*Paging information for a list response.
curl -X GET "https://example.com/anomaly/findings"{ "items": [ { "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "detector": "llm_cost_spike", "family": "baseline", "grain": "hour", "metric": "string", "dimension": "string", "dimension_display": "string", "subject_type": "user", "subject_id": "string", "subject_display_name": "string", "bucket": "2019-08-24T14:15:22Z", "last_bucket": "2019-08-24T14:15:22Z", "severity": "low", "status": "open", "observed": 0.1, "evidence": { "baseline": { "window_days": 0, "n": 0, "mean": 0.1, "stddev": 0.1, "median": 0.1, "mad": 0.1, "mean_ad": 0.1 }, "scoring": { "robust_score": 0.1, "z_score": 0.1, "dispersion_basis": "mad", "threshold": 0.1, "floor": 0.1, "abs_delta": 0.1, "rel_factor": 0.1 }, "peer": { "rank": 0.1, "n": 0 }, "slice": { "hour": 0, "dow_class": "string", "fell_back": true }, "prior": { "max": 0.1, "p90": 0.1, "exceeded": true }, "novelty": { "keys": [ "string" ], "keys_display": [ "string" ], "new_for_org": true, "dormancy_days": 0 }, "threshold": { "floor": 0.1 }, "off_hours": { "min_calls": 0.1, "history_days": 0 } }, "created_at": "2019-08-24T14:15:22Z", "updated_at": "2019-08-24T14:15:22Z", "status_changed_at": "2019-08-24T14:15:22Z" } ], "meta": { "total": 0, "offset": 0, "limit": 0 }}