Auvik icon

Auvik

Interact with Auvik API

Actions41

Playbook → Triage Alerts

AI-generated

Summary

Fetches Auvik alerts across one or more tenants and returns alert-centric triage records. Each record can include device context, recent bandwidth utilisation and last-configuration reference. Optionally bulk-dismisses the matching alerts.

Inputs

  • Tenants — Tenants to query, loaded from your Auvik account. Shared with the Health Snapshot operation.
  • Severity — Filter by Critical, Emergency, Info or Warning. The default, Any, applies no severity filter.
  • Detected Time Preset — Time window for when alerts were detected. Presets range from the last 5 minutes to year to date. The default is No Filter. Custom shows the Detected After and Detected Before fields.
  • Detected After / Detected Before — ISO timestamps (YYYY-MM-DDTHH:mm:ss.SSSZ) that set a custom detection range. Shown only when the preset is Custom.
  • Include Recent Utilisation — Default true. Adds bandwidth utilisation statistics for the alert's device.
  • Utilisation Preset — Time window for the utilisation data. Shown only when utilisation is included.
  • Utilisation Window — Window length in hours (1–168, default 24). Shown only when the utilisation preset is Custom.
  • Include Last Configuration — Default true. Adds a reference to the device's last configuration. The API provides no content diff.
  • Bulk Dismiss — Default false. When enabled, dismisses each matching alert by calling POST /alert/dismiss/{id}. This changes data in Auvik.
  • Confirm Bulk Dismiss — Must be ticked to confirm the dismissal. Shown only when Bulk Dismiss is on.
  • Return All — Default true. Fetches all matching alerts.
  • Limit — Maximum number of alerts to return (1–10000, default 100). Shown only when Return All is off.

Output shape

A list of alert-centric items. Each item has alert details, a device summary, and optional utilisation and last-configuration information.

The exact output field names are not visible in the provided signature-level source. If Bulk Dismiss is on, alerts are dismissed as a side effect. Requests retry on rate limits and 5xx errors.

Examples

Example 1: Review critical alerts from the last 24 hours across selected tenants, with device context.

Tenants: pick some; Severity: Critical; Detected Time Preset: Last 24 hours; Include Utilisation and Last Configuration: on; Return All: on.

Example 2: Clear stale informational alerts from the last 7 days.

Severity: Info; Detected Time Preset: Last 7 days; Bulk Dismiss: on; Confirm Bulk Dismiss: on.

Example 3: Pull a small, quick sample of recent alerts without extra enrichment.

Include Utilisation: off; Include Last Configuration: off; Return All: off; Limit: 25.

Links

Discussion