# /alerts/history - Org-level paginated alert history

**GET /alerts/history**

Returns paginated resolved alert history scoped to the caller's hierarchy
(no `organization_id`), a single tenant (`organization_id=X`), or a sub-tree
(`organization_id=X&include=descendants`). Mirrors the scope rules of
`/alerts/totals` and `/alerts/trend`.

Supports date range (`from_date`/`to_date`, RFC3339) and multi-value label
filters (`system_key`, `alertname`, `severity`, `status`). All multi-value
filters: OR within the same filter, AND across filters.

Customer callers are always pinned to their own organization regardless of params.



## Servers
- Backend API server: https://my.nethesis.it/backend/api (Backend API server)


## Authentication methods
- Bearer auth


## Parameters


### Query parameters

- **organization_id** (array[string])
  Target organization ID(s). Repeat the param to pass multiple values.
  Optional for all roles except Customer (where it is ignored).

- **include** (string)
  Set to `descendants` together with `organization_id` to expand each value to its sub-tree.

- **page** (integer)
  Page number

- **page_size** (integer)
  Items per page

- **sort_by** (string)

- **sort_direction** (string)
  Sort direction. Unlike the shared default of `asc`, this endpoint
  defaults to `desc` so the natural "most recent first" ordering is
  applied when the caller omits the param.

- **from_date** (string(date-time))
  Lower bound on `created_at` (inclusive). RFC3339 timestamp.

- **to_date** (string(date-time))
  Upper bound on `created_at` (exclusive). RFC3339 timestamp. Must be after `from_date`.

- **system_key** (array[string])
  Filter by one or more system keys. Repeat the param to pass multiple
  values; results are matched as `system_key IN (...)`.

- **alertname** (array[string])
  Filter by alertname. Supports multiple values.

- **search** (string)
  Free-text search: case-insensitive substring match on the alert
  type, its summary and description (any language), the `service`
  label, the system name/key/FQDN and the company name. Combines
  with the other filters (AND).

- **severity** (array[string])
  Filter by severity. Supports multiple values.

- **status** (array[string])
  Filter by status. Supports multiple values.



## Responses
### 200
Paginated alert history

#### Body: application/json (object)
- **code** (integer)

- **message** (string)

- **data** (object)


### 400
Bad request - validation error

#### Body: application/json (object)
- **code** (integer)
  HTTP error code

- **message** (string)
  Error message

- **data** (object)


### 401
Unauthorized - invalid or missing token

#### Body: application/json (object)
- **code** (integer)

- **message** (string)

- **data** (object | null)


### 403
Forbidden - insufficient permissions

#### Body: application/json (object)
- **code** (integer)

- **message** (string)

- **data** (object | null)



[Powered by Bump.sh](https://bump.sh)