Business and transactions

Alerts and case management

Investigate, escalate and close monitoring alerts.

Rule hits create alerts. Work them in Monitoring → Alerts or by API.

#Statuses

open → investigating → escalated → closed_false_positive, closed_true_positive or sar_filed. Closing needs a note.

GET/v1/alertsFilter by status, customer_ref, priority

PATCH/v1/alerts/{id}{status, assignee, note}

bash

curl -X PATCH https://{{HOST}}/v1/alerts/alrt_... -H "x-api-key: sk_live_..." -H "Content-Type: application/json" \
  -d '{"status":"closed_false_positive","note":"Salary payment, confirmed with customer"}'

Each change sends alert.updated. Assigned analysts are emailed.