Unrecovered Incidents List¶
POST /api/v1/events/abnormal/list
Overview¶
Get a list of unrecovered incidents (the latest event with the same df_monitor_checker_event_ref whose status is not ok) within a specified time range, typically querying data from the last 6 hours.
Body Request Parameters¶
| Parameter Name | Type | Required | Description |
|---|---|---|---|
| search | string | Search event title Allow empty: False |
|
| lastStatus | string | Last status Allow empty: False Example: critical Allowed values: ['fatal', 'critical', 'error', 'warning', 'nodata'] |
|
| timeRange | array | Y | Time range, defaults to the last 6 hours, time difference cannot exceed 6 hours Allow empty: False $minLength: 2 Max length: 2 Example: [1642563283250, 1642563304850] |
| timeRange[*] | integer | Y | Millisecond-level integer timestamp Allow empty: False |
| filters | array | Filter condition list Allow empty: False |
|
| offset | integer | Offset Allow empty: False Example: 10 $minValue: 0 |
|
| limit | integer | Number of items per page Allow empty: False Example: 10 $minValue: 1 $maxValue: 100 |
Parameter Supplementary Explanation¶
Parameter explanation:
The basic structure of the template consists of: view structure (including chart structure, view variable structure, chart grouping structure)
filters Main Structure Explanation
| Parameter Name | type | Required | Description |
|---|---|---|---|
| condition | string | Relationship with the previous filter condition, allowed values:and, or; Default value: and |
|
| filters | array | Sub-filter conditions, equivalent to adding a layer of parentheses. When this parameter exists, only condition takes effect, other parameters become invalid |
|
| name | string | Field name to filter | |
| operation | string | Operator, allowed values: >, >=, <, <=, =, !=, in, wildcard, query_string, exists |
|
| value | array | Value list | |
| value[#] | string/int/boolean | Can be string/numeric/boolean type. When comparing data, specific elements from value will be taken for comparison based on the characteristics of operation. For example, when operation is =, only value[0] participates in the operation. |
** filters Example
[
{
"name": "A",
"condition": "and",
"operation": "between",
"value": [1577410594000, 1577410494000]
},
{
"condition": "and",
"filters": [
{
"name": "tagA",
"condition": "and",
"operation": ">",
"value": 12,
},
{
"name": "tagB",
"condition": "and",
"operation": "=",
"value": ["fff"]
}
],
},
{
"name": "tagC",
"condition": "and",
"operation": "=",
"value": ["ok"]
}
]
Request Example¶
curl 'https://openapi.guance.com/api/v1/events/abnormal/list' \
-H 'DF-API-KEY: <DF-API-KEY>' \
-H 'Content-Type: application/json;charset=UTF-8' \
--data-raw '{"offset": 0, "limit": 10, "timeRange": [1642563283250, 1642563304850]}' \
--compressed
Response¶
{
"code": 200,
"content": {
"data": [
{
"__docid": "E_c7jodqs24loo3v53qc50",
"alert_time_ranges": [
[
1642541760000,
null
]
],
"date": 1642563300000,
"df_dimension_tags": "{\"host\":\"10-23-190-37\"}",
"df_event_id": "event-6ea0350eda12405dad9c1cba4b28cdc3",
"df_message": "critical\ncpu\n0.010000123409284342",
"df_meta": "{\"alerts_sent\":[],\"check_targets\":[{\"alias\":\"Result\",\"dql\":\"M::`cpu`:(NON_NEGATIVE_DERIVATIVE(`usage_user`) AS `DingTalk`) { `host` = '10-23-190-37' } BY `host`\",\"range\":3600}],\"checker_opt\":{\"id\":\"rul_xxxx32\",\"interval\":60,\"message\":\"{{ df_status }}\\n{{ df_monitor_checker_name }}\\n{{ Result }}\",\"name\":\"cpu\",\"noDataInterval\":0,\"recoverInterval\":0,\"rules\":[{\"conditionLogic\":\"and\",\"conditions\":[{\"alias\":\"Result\",\"operands\":[\"0.01\"],\"operator\":\">=\"}],\"status\":\"critical\"}],\"title\":\"title1\"},\"dimension_tags\":{\"host\":\"10-23-190-37\"},\"extra_data\":{\"type\":\"simpleCheck\"},\"monitor_opt\":{\"id\":\"monitor_xxxx32\",\"name\":\"Default Group\",\"type\":\"default\"}}",
"df_monitor_checker_event_ref": "320fed7a6dd82a0bcb2a539248e6bedc",
"df_status": "critical",
"df_title": "title1"
},
{
"__docid": "E_c7jodqs24loo3v53qc4g",
"alert_time_ranges": [
[
1642541760000,
null
]
],
"date": 1642563300000,
"df_dimension_tags": "{\"host\":\"10-23-190-37\"}",
"df_event_id": "event-d2366597f7244ae099d3fbda07d8ec5f",
"df_message": "critical\ncpu\n0.010000123409284342",
"df_meta": "{\"alerts_sent\":[],\"check_targets\":[{\"alias\":\"Result\",\"dql\":\"M::`cpu`:(NON_NEGATIVE_DERIVATIVE(`usage_user`) AS `DingTalk`) { `host` = '10-23-190-37' } BY `host`\",\"range\":3600}],\"checker_opt\":{\"id\":\"rul_xxxx32\",\"interval\":60,\"message\":\"{{ df_status }}\\n{{ df_monitor_checker_name }}\\n{{ Result }}\",\"name\":\"cpu\",\"noDataInterval\":0,\"recoverInterval\":0,\"rules\":[{\"conditionLogic\":\"and\",\"conditions\":[{\"alias\":\"Result\",\"operands\":[\"0.01\"],\"operator\":\">=\"}],\"status\":\"critical\"}],\"title\":\"title1\"},\"dimension_tags\":{\"host\":\"10-23-190-37\"},\"extra_data\":{\"type\":\"simpleCheck\"},\"monitor_opt\":{\"id\":\"monitor_xxxx32\",\"name\":\"Default Group\",\"type\":\"default\"}}",
"df_monitor_checker_event_ref": "899faaa6f042871f32fc58fe53b16e46",
"df_status": "critical",
"df_title": "title1"
}
],
"limit": 20,
"offset": 0,
"total_count": 2
},
"errorCode": "",
"message": "",
"success": true,
"traceId": "TRACE-4D5773BE-88B1-4167-A2F4-603A58404184"
}