> ## Documentation Index
> Fetch the complete documentation index at: https://docs.flexxible.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List alert history

> Returns a paginated list of closed alerts (history) for the selected Workspace. Default sorted by closed_at descending.



## OpenAPI

````yaml /en/api-reference/openapi.en-v2.json get /v2/organizations/{organization_id}/workspaces/{workspace_id}/alert-history
openapi: 3.0.3
info:
  title: API Publica Portal
  version: 1.0.0
  description: Public REST API for portal
servers:
  - url: https://api.flexxible.net/
    description: Portal API
security:
  - bearerAuth: []
tags:
  - name: Solve
    description: Flexxible Solve ticket visibility and management
  - name: Digital activity
    description: Core process group creation by organization
  - name: Locations
    description: Location management (FWS)
  - name: Roles
    description: Role creation endpoint for organization
  - name: Users
    description: User creation endpoint for organization
  - name: Workspace groups
    description: Management endpoints for workspace groups
  - name: Networks
    description: Network management (FWS)
  - name: WiFi Networks
    description: Wi-Fi network management (FWS)
  - name: Workspaces
    description: Workspace deletion endpoint for the organization
  - name: Event logs
    description: Workspace event logs query
  - name: Installed apps
    description: Installed application detail endpoint for the organization
  - name: Authentication
    description: Session context and authentication endpoints
  - name: Microservices
    description: Details of microservices by organization
  - name: Operations
    description: Detail queries for operations by organization
  - name: Organization
    description: Organization operations
  - name: Patch policy targets
    description: Patch policy objective management endpoints
  - name: Product configurations
    description: Product configuration management endpoints
  - name: Reporting Groups
    description: Operations on reporting groups
  - name: Sessions
    description: Session detail endpoint for the organization
  - name: Tenants
    description: Tenant management endpoints
  - name: Workspace Connection Logs
    description: Workspace connection logs query
  - name: Workspace GPO
    description: Query GPOs applied to a session
  - name: Workspace Notifications
    description: Workspace notifications query
paths:
  /v2/organizations/{organization_id}/workspaces/{workspace_id}/alert-history:
    get:
      tags:
        - Workspaces
      summary: List alert history
      description: >-
        Returns a paginated list of closed alerts (history) for the selected
        Workspace. Default sorted by closed_at descending.
      operationId: workspaces_alert_history
      parameters:
        - name: organization_id
          in: path
          required: true
          schema:
            type: string
            pattern: ^[0-9a-f]{24}$
            minLength: 24
            maxLength: 24
          description: Organization identifier.
          example: 507f1f77bcf86cd799439011
        - name: workspace_id
          in: path
          required: true
          schema:
            type: string
            pattern: ^[0-9a-f]{24}$
            minLength: 24
            maxLength: 24
          description: 'Workspace ID '
          example: 507f1f77bcf86cd799439099
        - name: page
          in: query
          required: false
          schema:
            type: integer
            default: 1
            minimum: 1
          description: Page number.
        - name: per_page
          in: query
          required: false
          schema:
            type: integer
            default: 100
            minimum: 1
            maximum: 100
          description: Number of items per page.
        - name: fields
          in: query
          required: false
          schema:
            type: string
            maxLength: 2048
          description: Comma-separated names of response element fields to include.
        - name: filters
          in: query
          required: false
          schema:
            type: string
            maxLength: 5120
          description: JSON filter expression over paths of filterable response fields.
          examples:
            simple:
              summary: Filter by alert name
              value: '{"field":"name","op":"contains","value":"disk"}'
            complex-and:
              summary: Filter by severity and information
              value: >-
                {"and":[{"field":"severity","op":"eq","value":"critical"},{"field":"information","op":"contains","value":"cpu"}]}
            complex-or-and:
              summary: Combine OR and AND conditions
              value: >-
                {"and":[{"or":[{"field":"name","op":"contains","value":"memory"},{"field":"description","op":"contains","value":"memory"}]},{"field":"severity","op":"eq","value":"warning"}]}
        - name: sort
          in: query
          required: false
          schema:
            type: string
          description: >-
            Sorting expression format <field>:asc|desc over sortable scalar
            field paths in the response. Default: closed_at:desc.
      responses:
        '200':
          description: Workspace alert history retrieved successfully.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetWorkspaceAlertHistoryResponseV2'
              examples:
                paginated_result:
                  summary: Paginated list of closed alerts
                  value:
                    has_next: true
                    data:
                      - id: 64f0c2a1b2d3e4f506070811
                        name: Uso alto de CPU
                        description: El uso de CPU superó el umbral
                        severity: critical
                        started_at: '2026-03-15T08:00:00Z'
                        authorized_minutes: 30
                        notified_at: '2026-03-15T08:05:00Z'
                        information: El uso actual es 96%
                        threshold_unit_name: percent
                        threshold_value: 90
                        element: cpu
                        category: performance
                        alert_id: f8788f49-4e8a-47d6-9e64-19a7318c64d1
                        closed_at: '2026-03-15T09:00:00Z'
                empty_result:
                  summary: No alerts found in history
                  value:
                    has_next: false
                    data: []
        '400':
          description: Invalid request parameters.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                invalid_filters:
                  summary: Invalid filters format
                  value:
                    error:
                      message: Formato de filtros inválido
                      code: bad_request
                      details: filters debe ser una cadena JSON válida
        '401':
          description: Not authorized or organization not accessible.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                organization_not_authorized:
                  summary: Organization access failure
                  value:
                    error:
                      message: No autorizado
                      code: unauthorized
        '404':
          description: Workspace not found within the organization's authorized scope.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                workspace_not_found:
                  summary: Workspace does not exist within scope
                  value:
                    error:
                      message: Workspace no encontrado
                      code: not_found
        '500':
          description: Internal server error.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
              examples:
                unexpected_error:
                  summary: Unhandled failure
                  value:
                    error:
                      message: Error interno del servidor
                      code: internal_error
components:
  schemas:
    GetWorkspaceAlertHistoryResponseV2:
      type: object
      properties:
        has_next:
          type: boolean
          description: If another page is available.
        data:
          type: array
          items:
            $ref: '#/components/schemas/GetWorkspaceAlertHistoryItemV2'
      required:
        - has_next
        - data
    ErrorResponse:
      type: object
      properties:
        error:
          type: object
          properties:
            message:
              type: string
            code:
              type: string
            details:
              type: string
          required:
            - message
            - code
      required:
        - error
    GetWorkspaceAlertHistoryItemV2:
      type: object
      properties:
        id:
          type: string
          pattern: ^[0-9a-f]{24}$
          minLength: 24
          maxLength: 24
          description: History record identifier.
        alert_id:
          type: string
          nullable: true
          description: >-
            Alert original identifier in FlexxWorkspaces. It may repeat among
            history records.
        name:
          type: string
          nullable: true
          description: Alert name.
        description:
          type: string
          nullable: true
          description: Alert description.
        severity:
          type: string
          enum:
            - critical
            - warning
            - informational
          nullable: true
          description: >-
            Alert severity in lowercase. It will be null when the source data is
            not valid.
        started_at:
          type: string
          format: date-time
          nullable: true
          description: Alert start timestamp.
        authorized_minutes:
          type: number
          nullable: true
          description: Authorized duration in minutes.
        notified_at:
          type: string
          format: date-time
          nullable: true
          description: Notification timestamp.
        information:
          type: string
          nullable: true
          description: Additional alert information.
        threshold_unit_name:
          type: string
          nullable: true
          description: Name of the threshold unit.
        threshold_value:
          type: number
          nullable: true
          description: Threshold value.
        element:
          type: string
          nullable: true
          description: Affected element.
        category:
          type: string
          nullable: true
          description: Alert category.
        closed_at:
          type: string
          format: date-time
          nullable: true
          description: Alert closure timestamp.
      required:
        - id
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT

````