Alert APIs version 2

Two versions of alert APIs are available - V1 and V2.

Important
V1 APIs will be deprecated by end of 2025.
V2 alert IDs have a new format. V2 APIs will not accept V1 alert IDs.

The following advanced threat APIs are part of V2:

Alert search request
POST https://<etp_instance_addr>/api/v2/public/alerts/search
Alert details request
GET https://<etp_instance_addr>/api/v2/public/alerts/<alert_id>
Download alert malware files as ZIP request
GET https://<etp_instance_addr>/api/v2/public/alerts/<alert_id>/malware
Download alert PCAP files as ZIP request
GET https://<etp_instance_addr>/api/v2/public/alerts/<alert_id>/packet-capture
Download alert case files as ZIP request
GET https://<etp_instance_addr>/api/v2/public/alerts/<alert_id>/casefile
Alert read request
PATCH https://<etp_instance_addr>/api/v2/public/alerts/read
Alert acknowledge request
PATCH https://<etp_instance_addr>/api/v2/public/alerts/acknowledge
Alert delete request
DELETE https://<etp_instance_addr>/api/v2/public/alerts/<alert_id>
Alerts bulk delete request
PATCH https://<etp_instance_addr>/api/v2/public/alerts/delete
URL click reporting request
GET https://<etp_instance_addr>/api/v2/public/alerts/<alert_id>/urlclickreport