Filtering alerts based on subscription

%3CLINGO-SUB%20id%3D%22lingo-sub-2843493%22%20slang%3D%22en-US%22%3EFiltering%20alerts%20based%20on%20subscription%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2843493%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ELet's%20say%20I%20have%20multiple%20Sentinel%20instances%20in%20the%20same%20tenant%20ID.%26nbsp%3B%20%26nbsp%3BWould%20it%20be%26nbsp%3B%20possible%20to%20filter%20alerts%20by%20subscription.%26nbsp%3B%20%26nbsp%3BKind%20of%26nbsp%3B%3CSPAN%3EGET%20%2Fsecurity%2Falerts%3F%24filter%3D%7BSubscriptionID%7D%20eq%20'%7BsubID%7D'%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EThanks%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

Hello,

 

Let's say I have multiple Sentinel instances in the same tenant ID.   Would it be  possible to filter alerts by subscription.   Kind of GET /security/alerts?$filter={SubscriptionID} eq '{subID}'

 

Thanks

0 Replies