Fetch a flat collection of hits
Changed onReturns only a flat array of all hits (the Intelligence Cloud data that caused the alert to trigger) for one or several alerts.
This endpoint will also include the alert ID and a numeric index for each hits object.
Request
- Base URLapi.recordedfuture.com/alert (relative, and the document’s source URL is not known)
- AuthAPI key in header X-RFToken
Query parameters
Alert ids separated by comma
Include text tags
Response
A list of hits for the alert(s)
Example response
{
"data": [
{
"id": "Gb7LZpBRHpP",
"language": "eng",
"document": {
"source": {
"id": "idn:services.onlinebox.com",
"name": "services.onlinebox.com",
"type": "InternetDomainName"
},
"authors": [
{
"id": "idn:services.onlinebox.com",
"name": "services.onlinebox.com",
"type": "InternetDomainName"
}
]
},
"entities": [
{
"id": "idn:services.onlinebox.com",
"name": "services.onlinebox.com",
"type": "InternetDomainName"
}
],
"primary_entity": {
"id": "idn:services.onlinebox.com",
"name": "services.onlinebox.com",
"type": "InternetDomainName"
},
"analyst_note": {
"id": "ZVUGoO",
"url": {
"portal": "https://app.recordedfuture.com/portal/analyst-note/shared/true/doc:ZVUGoO",
"api": "https://api.recordedfuture.com/v2/analystnote/ZVUGoO"
}
},
"alert_id": "Yo0T32",
"index": 4
}
]
}Changes
- breaking
the
/response's property type changed fromobjectto no type for status - warning
removed the optional property
//from the response with the status - warning
removed the optional property
//from the response with the status - warning
removed the optional property
//from the response with the status - warning
removed the optional property
//from the response with the status - warning
removed the optional property
//from the response with the status - warning
removed the optional property
//from the response with the status - warning
removed the optional property
//from the response with the status - warning
removed the optional property
//from the response with the status - warning
removed the optional property
//from the response with the status - info
added
subschema #2to the/response propertyallOflist for the response status
- breaking