---
title: "POST /alerts"
method: POST
path: "/alerts"
---

# POST /alerts

`POST /alerts`

## Request

- Base URL: `https://dev-cloud.acronis.com/api/alert_manager/v1`
- URL: `https://dev-cloud.acronis.com/api/alert_manager/v1/alerts`
- Auth: OAuth 2
  - Authorization code: `https://dev-cloud.acronis.com/api/2/idp/authorize`
  - Client credentials
  - Password
  - Token URL: `https://dev-cloud.acronis.com/api/2/idp/token` scopes: `urn:acronis.com::alert_manager::admin`

Creates and activates an alert.

## Request body

- union: Alert payload
  - object: An alert that is raised if GreatHorn email security has detected a malicious email message.
    - `_sourceTimeStamp` integer
    - `_source` string: Identifier of the alert producer.
    - `context` Context: **Deprecated.** Value of unique key for alerts with current type. Parameters of object can be only strings. Variable structure of context is specified with custom types.
    - `createdAt` string, date-time
    - `id` string
    - `details` object, required: Alert type specific payload
      - `resource` string, required: Mailbox name
      - `emailSubject` string, required
      - `scanResult` string, required
      - `emailFrom` string, required
      - `detectionCategory` string, required: Phishing, spam, malware, BEC, etc.
    - `tenantID` string
    - `severity` 'ok' | 'information' | 'warning' | 'error' | 'critical': Alert severity level.
    - `type` 'MaliciousEmailDetectedGreatHorn', required: Alert type
    - `affinity` string: Alert synchronization affinity (e.g., agent ID).
  - object: An alert that is raised if Perception Point email security has detected a potential threat in an email message.
    - `_sourceTimeStamp` integer
    - `_source` string: Identifier of the alert producer.
    - `context` Context: **Deprecated.** Value of unique key for alerts with current type. Parameters of object can be only strings. Variable structure of context is specified with custom types.
    - `createdAt` string, date-time
    - `id` string
    - `details` object, required: Alert type specific payload
      - `resource` string, required: Mailbox name
      - `emailSubject` string, required
      - `scanResult` string, required
      - `emailFrom` string, required
      - `detectionCategory` string, required: Phishing, spam, malware, BEC, etc.
    - `tenantID` string
    - `severity` 'ok' | 'information' | 'warning' | 'error' | 'critical': Alert severity level.
    - `type` 'MaliciousEmailDetectedPerceptionPointError', required: Alert type
    - `affinity` string: Alert synchronization affinity (e.g., agent ID).
  - object: An alert that is raised if Perception Point email security has detected a suspicious email message.
    - `_sourceTimeStamp` integer
    - `_source` string: Identifier of the alert producer.
    - `context` Context: **Deprecated.** Value of unique key for alerts with current type. Parameters of object can be only strings. Variable structure of context is specified with custom types.
    - `createdAt` string, date-time
    - `id` string
    - `details` object, required: Alert type specific payload
      - `resource` string, required: Mailbox name
      - `emailSubject` string, required
      - `scanResult` string, required
      - `emailFrom` string, required
      - `detectionCategory` string, required: Phishing, spam, malware, BEC, etc.
    - `tenantID` string
    - `severity` 'ok' | 'information' | 'warning' | 'error' | 'critical': Alert severity level.
    - `type` 'MaliciousEmailDetectedPerceptionPointWarning', required: Alert type
    - `affinity` string: Alert synchronization affinity (e.g., agent ID).
  - object: No backup for X days.
    - `_sourceTimeStamp` integer
    - `_source` string: Identifier of the alert producer.
    - `context` Context: **Deprecated.** Value of unique key for alerts with current type. Parameters of object can be only strings. Variable structure of context is specified with custom types.
    - `createdAt` string, date-time
    - `id` string
    - `details` object, required: Alert type specific payload
      - `planName` string
      - `errorMessage` object
      - `resourceId` string, required
      - `resourceName` string
      - `planId` string, required
      - `daysPassed` integer, required
    - `tenantID` string
    - `severity` 'ok' | 'information' | 'warning' | 'error' | 'critical': Alert severity level.
    - `type` 'NoBackupForXDays', required: Alert type
    - `affinity` string: Alert synchronization affinity (e.g., agent ID).
  - object: Generic alert with arbitrary payload
    - `_sourceTimeStamp` integer
    - `_source` string: Identifier of the alert producer.
    - `context` Context: **Deprecated.** Value of unique key for alerts with current type. Parameters of object can be only strings. Variable structure of context is specified with custom types.
    - `createdAt` string, date-time
    - `id` string
    - `details` object, required: Alert type specific payload
    - `tenantID` string
    - `severity` 'ok' | 'information' | 'warning' | 'error' | 'critical': Alert severity level.
    - `type` string, required: Alert type
    - `affinity` string: Alert synchronization affinity (e.g., agent ID).

## Response `200`

ID of the created alert.

- AlertID
  - `id` string, required

## Other responses

- `400`: Alert is invalid, e.g. incompatible with the alert type definition.
- `401`: Request is refused because authentication parameters are invalid.
- `403`: A security error due to an issue with tenant security claim: invalid tenant in the access token, tenant resolution failed and etc.

---

[API](https://skmtc.dev/acronis/apis/alert-manager-api.md) - [All operations](https://skmtc.dev/acronis/apis/alert-manager-api/llms.txt) - [OpenAPI document](https://skmtc.dev/acronis/apis/alert-manager-api/revisions/540eec169663?raw)