Returns a list of all guidance entries for the workspace.
When true, returns only enabled guidance entries; when false, only disabled. Unset returns all guidance entries.
The maximum number of guidance entries to retrieve per page. Default is 50. Maximum is 100. If the number of results exceeds the defined page size, use pagination to retrieve the next page by making an identical List guidance request and providing the page token from the previous response.
Token received from a previous List guidance response. Provide this to retrieve the next page of results.
A successful response.
The guidance entries returned.
Guidance provides business context that informs Auto Triage reasoning during alert triage. Each entry defines instructions or policies scoped to specific alerts, helping Auto Triage produce more accurate triage verdicts.
The unique identifier of the guidance entry.
The guidance name. Maximum 200 characters.
An optional description of the guidance.
The instruction text provided to Auto Triage during alert triage.
Whether the guidance is currently active.
Defines which alerts this applies to.
The scope of alerts this applies to. Accepted values: "always", "by_source", "by_categories".
The security categories to match. Required when type is "by_categories".
The alert source type IDs to match. Required when type is "by_source".
The timestamp when the guidance was created.
The timestamp when the guidance was last updated.
When a token is returned, it indicates there is another page of results to retrieve. Pass this token as the page_token parameter in a subsequent List guidance request. If this field is empty, there are no additional pages to retrieve.
Invalid bearer token. If you receive this message more than once try creating a new Client ID/Client Secret or generating a new bearer token.
You don't have permission to access this resource.