Get list of Investigations

get

https://sandbox.alloy.co/v1/investigations

Retrieves a filterable paginated list of investigations.

Filters are passed as a JSON-encoded q query parameter. For example:
/v1/investigations?q={"createdAtFrom":"2026-08-31T04:00:00.000Z","statuses":["alert_review"]}.

Query Params

object

JSON-encoded object of investigation filters. Pass q as a single JSON object value, not as exploded key=value pairs.

Correct: /v1/investigations?q={"createdAtFrom":1737742979000}

Correct: /v1/investigations?q={"createdAtFrom":"2026-08-31T04:00:00.000Z","statuses":["alert_review"]}

Incorrect: /v1/investigations?q=createdAtFrom=1737742979

Date fields accept a Unix timestamp in milliseconds (number) or an ISO 8601 string. ISO 8601 is recommended and matches the Investigations queue URL in the dashboard.

pageNum

number

Defaults to 1

Which page number to return. Default is 1

numRowsPerPage

number

Defaults to 20

Limits results per page. Up to 100.

sortColumn

string

enum

Defaults to created_at

Allowed:

sortOrder

string

enum

Defaults to DESC

Allowed:

Responses

200Success

401Authentication Failure