This is HTML
" format: HTML # can also be PLAIN_TEXT if you want HTML parsing disabled } ) { comment { id } } ``` #### Assigning and un-assigning a user to one or more alerts by supplying a user ID ```graphql mutation UpdateAlertsAssigneeById { updateAlertsAssigneeById( input: { assigneeId: "FAKE_USER_ID" ids: ["FAKE_ALERT_ID_1","FAKE_ALERT_ID_2"] } ) { alerts { assignee { email givenName familyName id } } } } ``` #### Assigning and un-assigning a user to one or more alerts by supplying a user email address ```graphql mutation UpdateAlertsAssigneeByEmail { updateAlertsAssigneeByEmail( input: { assigneeEmail: "fake@email.com" ids: ["FAKE_ALERT_ID_1","FAKE_ALERT_ID_2"] } ) { alerts { assignee { email givenName familyName id } } } } ``` ## End-to-end examples Below, we will build on the [Common Operations](#common-operations) examples to showcase an end-to-end flow. #### Find a particular set of alerts and mark them as *Resolved:* {% tabs %} {% tab title="NodeJS" %} ```javascript // npm install graphql graphql-request import { GraphQLClient, gql } from 'graphql-request'; const client = new GraphQLClient( 'YOUR_PANTHER_API_URL', { headers: { 'X-API-Key': 'YOUR_API_KEY' } }); // `FindAlerts` is a nickname for the query. You can fully omit it. const findAlerts = gql` query FindAlerts($input: AlertsInput!) { alerts(input: $input) { edges { node { id } } pageInfo { hasNextPage endCursor } } } `; // `UpdateAlerts` is a nickname for the query. You can fully omit it. const updateAlerts = gql` mutation UpdateAlerts($input: UpdateAlertStatusByIdInput!) { updateAlertStatusById(input: $input) { alerts { id } } } `; (async () => { try { // an accumulator that holds all alerts that we fetch all pages let allAlerts = []; // a helper to know when to exit the loop let hasMore = true; // the pagination cursor let cursor = null; // Keep fetching pages until there are no more left do { const queryData = await client.request(findAlerts, { input: { severities: ["LOW"], createdAtAfter: "2022-02-01T00:00:00.000Z", createdAtBefore: "2022-03-01T00:00:00.000Z", cursor } }); allAlerts = [ ...allAlerts, ...queryData.alerts.edges.map((edge) => edge.node) ]; hasMore = queryData.alerts.pageInfo.hasNextPage; cursor = queryData.alerts.pageInfo.endCursor; } while (hasMore); // Now update the alerts if (!allAlerts.length) { console.log("Could not find any alerts to resolve"); return; } const mutationData = await client.request(updateAlerts, { input: { ids: allAlerts.map((alert) => alert.id), status: "RESOLVED" } }); console.log( `Resolved ${mutationData.updateAlertStatusById.alerts.length} alert(s)!` ); } catch (err) { console.error(err.response); } })(); ``` {% endtab %} {% tab title="Python" %} ```python # pip install gql aiohttp from gql import gql, Client from gql.transport.aiohttp import AIOHTTPTransport transport = AIOHTTPTransport( url="YOUR_PANTHER_API_URL", headers={"X-API-Key": "YOUR_API_KEY"} ) client = Client(transport=transport, fetch_schema_from_transport=True) # `FindAlerts` is a nickname for the query. You can fully omit it. find_alerts = gql( """ query FindAlerts($input: AlertsInput!) { alerts(input: $input) { edges { node { id } } pageInfo { hasNextPage endCursor } } } """ ) # `UpdateAlerts` is a nickname for the query. You can fully omit it. update_alerts = gql( """ mutation UpdateAlerts($input: UpdateAlertStatusByIdInput!) { updateAlertStatusById(input: $input) { alerts { id } } } """ ) # an accumulator that holds all alerts that we fetch all pages all_alerts = [] # a helper to know when to exit the loop has_more = True # the pagination cursor cursor = None # Keep fetching pages until there are no more left while has_more: query_data = client.execute( find_alerts, variable_values={ "input": { "severities": ["LOW"], "createdAtAfter": "2022-02-01T00:00:00.000Z", "createdAtBefore": "2022-03-01T00:00:00.000Z", "cursor": cursor } } ) all_alerts.extend([edge["node"] for edge in query_data["alerts"]["edges"]]) has_more = query_data["alerts"]["pageInfo"]["hasNextPage"] cursor = query_data["alerts"]["pageInfo"]["endCursor"] # Now update the alerts if not len(all_alerts): print("Could not find any alerts to resolve") else: mutation_data = client.execute( update_alerts, variable_values={ "input": { "ids": [alert["id"] for alert in all_alerts], "status": "RESOLVED" } } ) print(f'Resolved {len(mutation_data["updateAlertStatusById"]["alerts"])} alert(s)!') ``` {% endtab %} {% endtabs %} --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.panther.com/panther-developer-workflows/api/graphql/alerts-and-errors.md?ask=