Syntax for filterQuery on the HX /alerts endpoint

Endpoint Security
#1

I am starting to fetch alerts from our HX /alerts endpoint using the API. I would like to fetch all alerts in a specific time window. I see in the lighthouse documentation that one of the parameters of the /alerts endpoint is “filterQuery”. The description states:

The filterQuery parameter allows for very specific filtering of search results. This must be an URL encoded JSON object.

However, I cannot find any documentation on the syntax of this JSON object. Any clues?

#2

We are currently in the process of creating additional documentation for the Helix API and I can reach out to someone on the team creating that documentation to get you an answer.

#3

Hi @jbrowe

It should look something like this:

{
“operator”:“between”,
“arg”:[“2021-02-10T00:00:00.000Z”, “2021-02-18T00:00:00.000Z”],
“field”:“created_at”
}

If you go to the documentation portal and look at the older documentation for 4.9 there are examples.