Issues

An issue is a group of related events (signals) sharing a fingerprint. Read endpoints require a general API key with the issues:read scope.


List issues

GET /api/v1/issues

Required scope: issues:read

Query parameters

ParamTypeNotes
statusstringFilter by status. One of OPEN, INVESTIGATING, CAUSE_CONFIRMED, CAUSE_RULED_OUT, RESOLVED, IGNORED. Invalid value → 400.
severitystringFilter by severity. One of CRITICAL, HIGH, MEDIUM, LOW. Invalid value → 400.
appIdstringFilter by application id.
limitinteger1–100, default 50. See pagination.
cursorstringOpaque cursor from a previous pagination.nextCursor.

Results are ordered newest first.

Example

curl "https://guardianlogs.com/api/v1/issues?status=OPEN&severity=HIGH&limit=20" \
  -H "Authorization: Bearer $GUARDIAN_API_KEY"
{
  "data": [
    {
      "id": "clissue001abcd00000000",
      "title": "TypeError: cannot read properties of undefined",
      "status": "OPEN",
      "severity": "HIGH",
      "appId": "clapp0001kidscuts000000",
      "fingerprint": "7f3a9c2e1b",
      "eventCount": 42,
      "isRepeatOffender": true,
      "assignedToUserId": null,
      "firstSeenAt": "2026-09-10T08:14:00.000Z",
      "lastSeenAt": "2026-09-13T16:22:11.000Z"
    }
  ],
  "pagination": { "nextCursor": "Y2xpc3N1ZTAwMWFiY2QwMDAwMDAwMA" }
}

Fields

FieldTypeNotes
idstringIssue id.
titlestringHuman-readable title.
statusstringSee status enum above.
severitystringCRITICAL \HIGH \MEDIUM \LOW.
appIdstringOwning application id.
fingerprintstringGrouping fingerprint (unique within the org).
eventCountintegerNumber of grouped events.
isRepeatOffenderbooleanRecurs across time.
assignedToUserIdstring \nullAssigned investigator, if any.
firstSeenAtstring (date-time)First occurrence.
lastSeenAtstring (date-time)Most recent occurrence.

Get one issue

GET /api/v1/issues/{id}

Required scope: issues:read

Cross-tenant or nonexistent id both return 404. The detail response adds createdAt and updatedAt to the list fields above.

Example

curl "https://guardianlogs.com/api/v1/issues/clissue001abcd00000000" \
  -H "Authorization: Bearer $GUARDIAN_API_KEY"
{
  "data": {
    "id": "clissue001abcd00000000",
    "title": "TypeError: cannot read properties of undefined",
    "status": "OPEN",
    "severity": "HIGH",
    "appId": "clapp0001kidscuts000000",
    "fingerprint": "7f3a9c2e1b",
    "eventCount": 42,
    "isRepeatOffender": true,
    "assignedToUserId": null,
    "firstSeenAt": "2026-09-10T08:14:00.000Z",
    "lastSeenAt": "2026-09-13T16:22:11.000Z",
    "createdAt": "2026-09-10T08:14:01.000Z",
    "updatedAt": "2026-09-13T16:22:12.000Z"
  }
}

To fetch the individual events in an issue, use GET /api/v1/signals?issueId=….

See also: signals.md · pagination.md · errors.md.