---
title: "GET /subscriptions/{subscriptionId}/providers/Microsoft.Security/alerts"
method: GET
path: "/subscriptions/{subscriptionId}/providers/Microsoft.Security/alerts"
tags: ["Alerts"]
---

# GET /subscriptions/{subscriptionId}/providers/Microsoft.Security/alerts

`GET /subscriptions/{subscriptionId}/providers/Microsoft.Security/alerts`

List all the alerts that are associated with the subscription

## Query parameters

- `$filter` string
- `$select` string
- `$expand` string
- `autoDismissRuleName` string

## Parameters

- `../../../common/v1/types.json#/components/parameters/ApiVersion` — unresolved $ref
- `../../../common/v1/types.json#/components/parameters/SubscriptionId` — unresolved $ref

## Response `200`

OK

- AlertList — List of security alerts
  - `value` Alert[] — unresolved $ref
  - `nextLink` string — The URI to fetch the next page.

## Other responses

- `default` — Error response describing why the operation failed.

## Changes

- **2020-05-18** (2019-01-01) `98b3f0dd253d` — 1 info
  - added the new optional `query` request parameter `autoDismissRuleName`

[Change history](https://skmtc.dev/azure/apis/security-center-2/changes/subscriptions/:subscriptionId/providers/Microsoft.Security/alerts/get.md)

---

[API](https://skmtc.dev/azure/apis/security-center-2.md) · [All operations](https://skmtc.dev/azure/apis/security-center-2/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/azure/security-center-2/revisions/98b3f0dd253d/schema)