ZRM Docs
Domain Model

Alert

Fields

FieldTypeRequiredDefaultDescription
idstring.uuidYesId
createdAtstring.date-timeYesCreated at
updatedAtstring.date-timeYesUpdated at
externalConnectionIdstringNoID of the associated external connection
siteIdstringYesID of the associated site
systemIdstringNoID of the associated system
assetIdstringNoID of the associated asset
alertTypeenum(access_denied, door_held, door_forced, tamper_detected, connection_lost, system_offline, low_battery, health_check_failed, fault_detected, unauthorized_access, configuration_change, other)YesAlert type
alertSeverityenum(informational, warning, error, critical)YesAlert severity
dispositionenum(open, acknowledged, investigating, resolved, false_alarm, auto_resolved)YesDisposition
sourceEventIdstringNoID of the associated source event
sourceEventJsonunknownNoSource event json
messagestringYesMessage
occurredAtstring.date-timeYesOccurred at
receivedAtstring.date-timeYesReceived at
incidentIdstringNoID of the associated incident
operatorNotesstringNoOperator notes
workspaceIdstringYesID of the associated workspace
visibilityModeenum(global, workspace_local, shared)YesVisibility mode

Create Schema

Fields accepted when creating a new record:

FieldTypeRequiredDefaultDescription
externalConnectionIdstringNoID of the associated external connection
siteIdstringYesID of the associated site
systemIdstringNoID of the associated system
assetIdstringNoID of the associated asset
alertTypeenum(access_denied, door_held, door_forced, tamper_detected, connection_lost, system_offline, low_battery, health_check_failed, fault_detected, unauthorized_access, configuration_change, other)YesAlert type
alertSeverityenum(informational, warning, error, critical)YesAlert severity
dispositionenum(open, acknowledged, investigating, resolved, false_alarm, auto_resolved)Yes"open"Disposition
sourceEventIdstringNoID of the associated source event
sourceEventJsonunknownNoSource event json
messagestringYesMessage
occurredAtstring.date-timeYesOccurred at
receivedAtstring.date-timeYes"2026-05-05T01:56:18.371Z"Received at
incidentIdstringNoID of the associated incident
operatorNotesstringNoOperator notes
workspaceIdstringNoID of the associated workspace
visibilityModeenum(global, workspace_local, shared)Yes"workspace_local"Visibility mode

Update Schema

All fields are optional when updating:

FieldTypeRequiredDefaultDescription
externalConnectionIdstringNoID of the associated external connection
siteIdstringNoID of the associated site
systemIdstringNoID of the associated system
assetIdstringNoID of the associated asset
alertTypeenum(access_denied, door_held, door_forced, tamper_detected, connection_lost, system_offline, low_battery, health_check_failed, fault_detected, unauthorized_access, configuration_change, other)NoAlert type
alertSeverityenum(informational, warning, error, critical)NoAlert severity
dispositionenum(open, acknowledged, investigating, resolved, false_alarm, auto_resolved)No"open"Disposition
sourceEventIdstringNoID of the associated source event
sourceEventJsonunknownNoSource event json
messagestringNoMessage
occurredAtstring.date-timeNoOccurred at
incidentIdstringNoID of the associated incident
operatorNotesstringNoOperator notes

On this page