All Products
Search

This Product

    Security Center:ListAlerts

    Document Center

    Security Center:ListAlerts

    Last Updated:Jul 03, 2026

    Retrieves a list of alerts.

    Operation description

    The input parameter JsonConfig is a complex JSON configuration. We provide a utility class with configuration examples. For more information, refer to Demo.

    Try it now

    Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

    Test

    RAM authorization

    No authorization for this operation. If you encounter issues with this operation, contact technical support.

    Request parameters

    Parameter

    Type

    Required

    Description

    Example
    RegionId

    string

    No

    The region where the threat analysis data management center is located. Specify the management center based on the region of your assets. Valid values:

    • cn-hangzhou: Your assets are located in the Chinese mainland or Hong Kong (China).

    • ap-southeast-1: Your assets are located outside China.

    cn-shanghai
    Lang

    string

    No

    The language of the response. Valid values:

    • zh (default): Chinese.

    • en: English.

    zh
    AlertLevel

    array

    No

    The threat level of the alert. Valid values:

    • 5: critical.

    • 4: high-risk.

    • 3: medium-risk.

    • 2: low-risk.

    • 1: informational.

    string

    No

    The threat level of the alert. Valid values:

    • 5: critical.

    • 4: high-risk.

    • 3: medium-risk.

    • 2: low-risk.

    • 1: informational.

    1
    AlertUuid

    string

    No

    The alert ID associated with the event.

    sas_71e24437d2797ce8fc59692905a4****
    QueryViewId

    string

    No

    The unique identifier of the query view.

    qv-a1b2c3d4e5f6g7****
    QueryCondition

    string

    No

    The query filter condition in JSON format. Valid values:

    • {"Type":"maxCost", "Value":"100"}: the top 100 queries with the longest execution duration.

    • {"Type":"status","Value":"finished"}: completed queries.

    • {"Type":"status","Value":"running"}: running queries.

    • {"Type":"cost","Min":"30","Max":"50"}: queries with a custom execution duration range. You can specify the minimum and maximum execution duration. Min specifies the minimum execution duration. Max specifies the maximum execution duration. Unit: milliseconds (ms).

      • If only Min is specified, queries with an execution duration greater than this value are returned.

      • If only Max is specified, queries with an execution duration less than this value are returned.

      • If both Min and Max are specified, queries with an execution duration greater than or equal to Min and less than or equal to Max are returned.

    {\"Type\":\"cost\",\"Max\":\"200\"}
    StartTime

    integer

    No

    The time when the alert first occurred.

    2025-09-30T02:23:00Z
    EndTime

    integer

    No

    The end time of the alert.

    1766801904000
    OrderFieldName

    string

    No

    The field used for sorting. Valid values:

    • GmtCreate: creation time.

    • GmtModified: update time.

    GmtModified
    OrderDirection

    string

    No

    The sort order. Valid values:

    • asc (default): ascending order.

    • desc: descending order.

    asc
    PageNumber

    integer

    Yes

    The page number.

    1
    PageSize

    integer

    Yes

    The number of entries per page.

    10
    RoleFor

    integer

    No

    The ID of the member accounts in the resource folder.

    113091674488****
    RoleType

    integer

    No

    The view type. Valid values:

    • 0: the view of the current Alibaba Cloud account.

    • 1: the view of all accounts in the enterprise.

    1
    MaxResults

    integer

    No

    The maximum number of entries to return in this request.

    50
    NextToken

    string

    No

    The pagination token. You do not need to specify this parameter for the first request or if no more results exist. If more results exist, set this parameter to the NextToken value returned in the previous API call.

    AAAAAUqcj6VO4E3ECWIrFczs****

    Response elements

    Element

    Type

    Description

    Example

    object

    Schema of Response

    RequestId

    string

    The request ID.

    6276D891-*****-55B2-87B9-74D413F7****
    Alerts

    array<object>

    The alert details.

    object

    The alert details.

    AlertUuid

    string

    The alert UUID.

    798341271677187
    AlertRecord

    string

    The alert details.

    {"alert_uuid":"a3f8c2e1-9b7d-4f6a-8c2e-1d5b9a7f****"}
    PageSize

    integer

    The number of entries per page.

    10
    PageNumber

    integer

    The page number.

    1
    TotalCount

    integer

    The total number of records.

    57
    MaxResults

    integer

    The maximum number of entries to return in this request.

    50
    NextToken

    string

    The token for the next query.

    AAAAAUqcj6VO4E3ECWIrFczs****

    Examples

    Success response

    JSON format

    {
  "RequestId": "6276D891-*****-55B2-87B9-74D413F7****",
  "Alerts": [
    {
      "AlertUuid": "798341271677187",
      "AlertRecord": "{\"alert_uuid\":\"a3f8c2e1-9b7d-4f6a-8c2e-1d5b9a7f****\"}"
    }
  ],
  "PageSize": 10,
  "PageNumber": 1,
  "TotalCount": 57,
  "MaxResults": 50,
  "NextToken": "AAAAAUqcj6VO4E3ECWIrFczs****"
}

    Error codes

    HTTP status code

    Error code

    Error message

    Description
    400 IdempotentParameterMismatch The request uses the same client token as a previous, but non-identical request. Do not reuse a client token with different requests, unless the requests are identical.

    See Error Codes for a complete list.

    Release notes

    See Release Notes for a complete list.