策略与告警

查询告警详情

查询单条告警的详细信息与处置建议

GET

/api/v1/agentstudio/security/agent_logs/{alert_id}

cURL

curl --request GET \
  --url 'https://{workspace_id}.{region}.maas.aliyuncs.com/api/v1/agentstudio/security/agent_logs/{alert_id}' \
  --header 'Authorization: Bearer <YOUR_API_KEY>'

{
  "success": false,
  "data": {
    "alert_id": "<string>",
    "risk_name": "<string>",
    "risk_desc": "<string>",
    "risk_detail": "<string>",
    "risk_handle": "<string>",
    "risk_level": "<string>",
    "asset_type": "<string>",
    "asset_name": "<string>",
    "app_id": "<string>",
    "app_name": "<string>",
    "status": "<string>",
    "source": "<string>",
    "check_time": "<string>",
    "handle_time": "<string>",
    "event_id": "<string>",
    "file_name": "<string>"
  }
}

Authorizations

string

header

required

Path Parameters

string

required

告警 ID，取自告警列表

Response

200-application/json

boolean

object

Show child attributes

string

告警记录 ID，详情查询主键

string

命中类目

string

命中原因（简要）

string

原始 Prompt 或风险详情，Markdown 格式的事件摘要与攻击模式分析

string

拦截话术或处置建议

string

风险等级：high / medium / low

string

风险节点类型，MCP 统一归为 tool

string

资产名称

string

应用 ID

string

Agent 名称

string

处置状态

string

来源

string

检查时间，毫秒时间戳字符串

string | null

处置时间，毫秒时间戳字符串

string

事件标识，即 Trace ID

string | null

Skill 文件名，仅 Skill 静态扫描类告警返回

cURL

curl --request GET \
  --url 'https://{workspace_id}.{region}.maas.aliyuncs.com/api/v1/agentstudio/security/agent_logs/{alert_id}' \
  --header 'Authorization: Bearer <YOUR_API_KEY>'

{
  "success": false,
  "data": {
    "alert_id": "<string>",
    "risk_name": "<string>",
    "risk_desc": "<string>",
    "risk_detail": "<string>",
    "risk_handle": "<string>",
    "risk_level": "<string>",
    "asset_type": "<string>",
    "asset_name": "<string>",
    "app_id": "<string>",
    "app_name": "<string>",
    "status": "<string>",
    "source": "<string>",
    "check_time": "<string>",
    "handle_time": "<string>",
    "event_id": "<string>",
    "file_name": "<string>"
  }
}