All Products
Search
Document Center

Security Center:DescribeEventLevelCount

Last Updated:Sep 17, 2026

Queries the total number of security alerts by severity level.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

  • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

  • API: The API that you can call to perform the action.

  • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

  • Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

    • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

    • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

  • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

  • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

yundun-sas:DescribeEventLevelCount

get

*All Resource

*

None None

Request parameters

Parameter

Type

Required

Description

Example

From

string

No

The source identifier of the request. Set this parameter to sas.

sas

ClusterId

string

No

The ID of the container cluster that you want to query.

Note

You can call the DescribeGroupedContainerInstances operation to obtain this parameter.

c7e3c5b420a7947c2933303144688****

ContainerIds

string

No

The container ID.

xxxxxx30389a10c28f6d38f2398f0dcexxxxxxx922b9e8290dc7c3019d4a8,48b87f2c0662e334820f436cb9133f1ae4e053d39b6fad42xxxxxxxxxx

ContainerFieldName

string

No

The container search field. Valid values:

  • instanceId: instance ID

  • appName: application name

  • clusterId: cluster ID

  • regionId: region

  • nodeName: node name

  • namespace: namespace

  • clusterName: cluster name

  • image: image name

  • imageRepoName: image repository name

  • imageRepoNamespace: image repository namespace

  • imageRepoTag: image tag

  • imageDigest: image digest

clusterId

ContainerFieldValue

string

No

The value of the field that you want to query. Separate multiple values with commas (,).

c951761046a9c4afe92be0a7b5bexxxxx

TargetType

string

No

The query type. Valid values:

  • containerId: container ID

  • uuid: asset ID

uuid

MultiAccountActionType

integer

No

The multi-account query type. Default value: 0. Valid values:

  • 0: Query data of the current account.

  • 1: Query data of all accounts.

0

ResourceDirectoryAccountId

integer

No

The Alibaba Cloud account ID of the member accounts in the resource folder.

Note

You can invoke the DescribeMonitorAccounts operation to obtain this parameter.

127608589417****

Response elements

Element

Type

Description

Example

object

The response parameters.

EventLevels

object

The statistics of security alerts by severity level.

Serious

integer

The number of security alerts with the Urgent severity level.

0

Suspicious

integer

The number of security alerts with the Suspicious severity level.

1

Remind

integer

The number of security alerts with the Reminder severity level.

2

Success

boolean

Indicates whether the request was successful. Valid values:

  • true: The request was successful.

  • false: The request failed.

true

Code

string

The response code. The value 200 indicates success. Any other value indicates failure. You can use this field to determine the cause of the failure.

200

Message

string

The returned message.

successful

RequestId

string

The request ID.

CE8CA5EA-24EF-5D41-B735-53ACE7XXXXX

Examples

Success response

JSON format

{
  "EventLevels": {
    "Serious": 0,
    "Suspicious": 1,
    "Remind": 2
  },
  "Success": true,
  "Code": "200",
  "Message": "successful",
  "RequestId": "CE8CA5EA-24EF-5D41-B735-53ACE7XXXXX"
}

Error codes

HTTP status code

Error code

Error message

Description

400 RdCheckNoPermission Resource directory account verification has no permission.
500 ServerError ServerError
500 RdCheckInnerError Resource directory account service internal error.
403 NoPermission caller has no permission You are not authorized to do this operation.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.