Open Integration Hub ingestion — send raw tool payloads for normalization and processing, with 23 documented tool reference payloads.
Every API here is available over the APIs.io API and to AI agents over MCP.
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
find_apisBrowse and filter every API in the catalog.get_api_artifactsOne API's artifacts, grouped by type.get_openapiThe primary OpenAPI for this API.find_similar_apisAPIs that look like this one.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.curl "https://apis.io/api/v1/apis/bigpanda-alert-ingestion-oim-api"curl "https://apis.io/api/v1/apis?limit=25"Discovery needs no key. Ratings and market analysis are Pro.
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.
openapi: 3.0.3
info:
title: BigPanda Alert Ingestion (OIM) API
description: BigPanda Alert Ingestion (OIM) operations, assembled verbatim from the OpenAPI fragments BigPanda publishes
on its own API reference at https://api-docs.bigpanda.io/. Each operation carries x-source-url naming the exact provider
page it was read from. BigPanda hosts each organization in a single data management region (US or EU); send requests to
the base URL for your region.
version: 1.0.0
contact:
name: BigPanda Support
url: https://api-docs.bigpanda.io/
license:
name: Proprietary
url: https://www.bigpanda.io/legal/
x-provenance:
method: searched
source: https://api-docs.bigpanda.io/llms.txt
harvested: '2026-09-04'
assembly: 'Operations copied verbatim from the per-endpoint OpenAPI 3.0.1 fragments BigPanda publishes at https://api-docs.bigpanda.io/<endpoint>.md.
Assembly-only normalizations: Apidog x-apidog security metadata stripped, securityScheme type "bearer" corrected to
type http/scheme bearer, schema name collisions suffixed. No operation, parameter, schema or response was authored by
API Evangelist.'
operations: 26
servers:
- url: https://api.bigpanda.io
description: US Region
- url: https://api.eu.bigpanda.io
description: EU Region
tags:
- name: Alert Ingestion (OIM)
paths:
/oim/{integration}/alerts:
post:
summary: Add an alert payload for OIM normalization and processing
deprecated: false
description: Add an alert payload for OIM normalization and processing
operationId: ingestAlert
tags:
- Alert Ingestion (OIM)
parameters:
- name: integration
in: path
description: ''
required: true
example: ''
schema:
type: string
requestBody:
content:
application/json:
schema:
type: object
properties: {}
x-apidog-orders: []
responses:
'201':
x-apidog-ordering: 0
description: created
content:
application/json:
schema:
type: object
properties: {}
x-apidog-orders: []
headers: {}
x-apidog-name: ''
'400':
x-apidog-ordering: 1
description: Bad request
content:
application/json:
schema:
type: object
properties: {}
x-apidog-orders: []
headers: {}
x-apidog-name: ''
'401':
x-apidog-ordering: 2
description: Unauthorized
headers: {}
x-apidog-name: ''
'404':
x-apidog-ordering: 3
description: Not found
content:
application/json:
schema:
type: object
properties: {}
x-apidog-orders: []
headers: {}
x-apidog-name: ''
'429':
x-apidog-ordering: 4
description: ''
headers: {}
x-apidog-name: ''
'500':
x-apidog-ordering: 5
description: Internal server error
content:
application/json:
schema:
type: object
properties: {}
x-apidog-orders: []
headers: {}
x-apidog-name: ''
x-publication-status: live
x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770217-run
x-source-url: https://api-docs.bigpanda.io/add-an-alert-payload-for-oim-normalization-and-processing-37770217e0.md
x-source-page: Add an alert payload for OIM normalization and processing
/oim/appdynamicsapi_v3/alerts:
post:
summary: AppDynamics
deprecated: false
description: Reference payload for AppDynamics. Shows the well-formed OIM alert payload shape for a AppDynamics source
— send it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
Requires an existing AppDynamics integration in BigPanda; the payload normalizes through that integration's parsing
rules.
operationId: postOimAppdynamicsapiV3Alerts
tags:
- Alert Ingestion (OIM)
parameters:
- name: access_token
in: query
description: ''
required: false
example: '{ACCESS_TOKEN}'
schema:
type: string
- name: app_key
in: query
description: ''
required: false
example: '{APP_KEY}'
schema:
type: string
- name: Content-Type
in: header
description: ''
required: false
example: application/json
schema:
type: string
- name: Authorization
in: header
description: ''
required: false
example: Bearer {ORG_BEARER_TOKEN}
schema:
type: string
requestBody:
content:
application/json:
schema:
type: object
properties:
clamp_limit:
type: integer
notes:
type: string
clamped:
type: boolean
policy_id:
type: string
format: utc-millisec
action_trigger_time:
type: string
format: style
from_web_hook:
type: boolean
full_events_list:
type: array
items:
type: object
properties:
severity:
type: string
deep_link_url:
type: string
format: uri
summary_message:
type: string
APPLICATION_id:
type: string
format: utc-millisec
APPLICATION_COMPONENT_NODE_id:
type: string
format: utc-millisec
APPLICATION_name:
type: string
display_name:
type: string
title:
type: string
format: style
bt_performance_event:
type: boolean
APPLICATION_COMPONENT_id:
type: string
format: utc-millisec
app_name:
type: string
event_type:
type: string
appd_event_type:
type: string
APPLICATION_COMPONENT_name:
type: string
guid:
type: string
affected_entities:
type: array
items:
type: object
properties:
name:
type: string
type:
type: string
id:
type: integer
x-apidog-orders:
- name
- type
- id
x-apidog-ignore-properties: []
event_message:
type: string
tag:
type: string
app_id:
type: integer
event_type_key:
type: string
event_time:
type: string
format: style
APPLICATION_COMPONENT_NODE_name:
type: string
event_type_severity:
type: string
object:
type: string
x-apidog-orders:
- severity
- deep_link_url
- summary_message
- APPLICATION_id
- APPLICATION_COMPONENT_NODE_id
- APPLICATION_name
- display_name
- title
- bt_performance_event
- APPLICATION_COMPONENT_id
- app_name
- event_type
- appd_event_type
- APPLICATION_COMPONENT_name
- guid
- affected_entities
- event_message
- tag
- app_id
- event_type_key
- event_time
- APPLICATION_COMPONENT_NODE_name
- event_type_severity
- object
x-apidog-ignore-properties: []
policy_name:
type: string
account_id:
type: string
format: utc-millisec
action_id:
type: string
format: color
account_name:
type: string
action_name:
type: string
controller_link_url:
type: string
format: uri
policy_digest:
type: boolean
x-apidog-orders:
- clamp_limit
- notes
- clamped
- policy_id
- action_trigger_time
- from_web_hook
- full_events_list
- policy_name
- account_id
- action_id
- account_name
- action_name
- controller_link_url
- policy_digest
x-apidog-ignore-properties: []
responses:
'201':
x-apidog-ordering: 0
description: '201'
content:
application/json:
schema:
$ref: '#/components/schemas/generic201response'
headers: {}
x-apidog-name: ''
x-publication-status: live
x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770232-run
x-source-url: https://api-docs.bigpanda.io/appdynamics-37770232e0.md
x-source-page: AppDynamics
/oim/azure_monitor_v2/alerts:
post:
summary: Azure
deprecated: false
description: Reference payload for Azure Monitor. Shows the well-formed OIM alert payload shape for a Azure Monitor
source — send it against a test integration's app key to validate the pipeline end to end before connecting production
traffic. Requires an existing Azure Monitor integration in BigPanda; the payload normalizes through that integration's
parsing rules.
operationId: postOimAzureMonitorV2Alerts
tags:
- Alert Ingestion (OIM)
parameters:
- name: access_token
in: query
description: ''
required: false
example: '{access_token}'
schema:
type: string
- name: app_key
in: query
description: ''
required: false
example: '{app_key}'
schema:
type: string
- name: Content-Type
in: header
description: ''
required: false
example: application/json
schema:
type: string
- name: Authorization
in: header
description: ''
required: false
example: Bearer {ORG_BEARER_TOKEN}
schema:
type: string
requestBody:
content:
application/json:
schema:
type: object
properties:
data:
type: object
properties:
essentials:
type: object
properties:
severity:
type: string
monitorCondition:
type: string
monitoringService:
type: string
description:
type: string
alertRule:
type: string
originAlertId:
type: string
essentialsVersion:
type: string
format: utc-millisec
alertContextVersion:
type: string
format: utc-millisec
alertTargetIDs:
type: array
items:
type: string
configurationItems:
type: array
items:
type: string
signalType:
type: string
firedDateTime:
type: string
format: date-time
alertId:
type: string
x-apidog-orders:
- severity
- monitorCondition
- monitoringService
- description
- alertRule
- originAlertId
- essentialsVersion
- alertContextVersion
- alertTargetIDs
- configurationItems
- signalType
- firedDateTime
- alertId
x-apidog-ignore-properties: []
alertContext:
type: object
properties:
eventDataId:
type: string
level:
type: string
eventSource:
type: string
Activity Log Event Description:
type: string
operationName:
type: string
subStatus:
type: string
submissionTimestamp:
type: string
format: date-time
authorization:
type: object
properties:
action:
type: string
scope:
type: string
x-apidog-orders:
- action
- scope
x-apidog-ignore-properties: []
caller:
type: string
format: email
channels:
type: string
claims:
type: string
format: style
operationId:
type: string
correlationId:
type: string
properties:
type: object
properties:
eventCategory:
type: string
message:
type: string
entity:
type: string
hierarchy:
type: string
x-apidog-orders:
- eventCategory
- message
- entity
- hierarchy
x-apidog-ignore-properties: []
eventTimestamp:
type: string
format: date-time
status:
type: string
x-apidog-orders:
- eventDataId
- level
- eventSource
- Activity Log Event Description
- operationName
- subStatus
- submissionTimestamp
- authorization
- caller
- channels
- claims
- operationId
- correlationId
- properties
- eventTimestamp
- status
x-apidog-ignore-properties: []
customProperties:
type: object
x-apidog-orders: []
properties: {}
x-apidog-ignore-properties: []
x-apidog-orders:
- essentials
- alertContext
- customProperties
x-apidog-ignore-properties: []
schemaId:
type: string
x-apidog-orders:
- data
- schemaId
x-apidog-ignore-properties: []
responses:
'201':
x-apidog-ordering: 0
description: '201'
content:
application/json:
schema:
$ref: '#/components/schemas/generic201response'
headers: {}
x-apidog-name: ''
x-publication-status: live
x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770239-run
x-source-url: https://api-docs.bigpanda.io/azure-37770239e0.md
x-source-page: Azure
/oim/meraki/alerts:
post:
summary: Cisco Meraki
deprecated: false
description: Reference payload for Cisco Meraki. Shows the well-formed OIM alert payload shape for a Cisco Meraki source
— send it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
Requires an existing Cisco Meraki integration in BigPanda; the payload normalizes through that integration's parsing
rules.
operationId: postOimMerakiAlerts
tags:
- Alert Ingestion (OIM)
parameters:
- name: access_token
in: query
description: ''
required: false
example: '{ACCESS_TOKEN}'
schema:
type: string
- name: app_key
in: query
description: ''
required: false
example: '{APP_KEY}'
schema:
type: string
- name: Content-Type
in: header
description: ''
required: false
example: application/json
schema:
type: string
- name: Authorization
in: header
description: ''
required: false
example: Bearer {BEARER_TOKEN}
schema:
type: string
requestBody:
content:
application/json:
schema:
type: object
properties:
deviceTags:
type: array
items:
type: string
alertTypeId:
type: string
occurredAt:
type: string
format: date-time
alertType:
type: string
organizationName:
type: string
networkName:
type: string
alertLevel:
type: string
sentAt:
type: string
alertData:
type: object
properties:
peerNetworkName:
type: string
vap:
type: string
format: utc-millisec
connectivity:
type: string
vpnType:
type: string
peerNetworkId:
type: string
onSecondary:
type: boolean
peerNetworkUrl:
type: string
format: uri
secondaryEndpoint:
type: string
format: ip-address
primaryEndpoint:
type: string
format: ip-address
x-apidog-orders:
- peerNetworkName
- vap
- connectivity
- vpnType
- peerNetworkId
- onSecondary
- peerNetworkUrl
- secondaryEndpoint
- primaryEndpoint
x-apidog-ignore-properties: []
organizationUrl:
type: string
format: uri
version:
type: string
deviceName:
type: string
organizationId:
type: string
deviceSerial:
type: string
networkTags:
type: array
items:
type: string
deviceMac:
type: string
format: style
deviceUrl:
type: string
format: uri
networkId:
type: string
deviceModel:
type: string
alertId:
type: string
sharedSecret:
type: string
networkUrl:
type: string
format: uri
x-apidog-orders:
- deviceTags
- alertTypeId
- occurredAt
- alertType
- organizationName
- networkName
- alertLevel
- sentAt
- alertData
- organizationUrl
- version
- deviceName
- organizationId
- deviceSerial
- networkTags
- deviceMac
- deviceUrl
- networkId
- deviceModel
- alertId
- sharedSecret
- networkUrl
x-apidog-ignore-properties: []
responses:
'201':
x-apidog-ordering: 0
description: '201'
content:
application/json:
schema:
$ref: '#/components/schemas/generic201response'
headers: {}
x-apidog-name: ''
x-publication-status: live
x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770233-run
x-source-url: https://api-docs.bigpanda.io/cisco-meraki-37770233e0.md
x-source-page: Cisco Meraki
/oim/cloudwatch/alerts:
post:
summary: CloudWatch
deprecated: false
description: Reference payload for Amazon CloudWatch. Shows the well-formed OIM alert payload shape for a Amazon CloudWatch
source — send it against a test integration's app key to validate the pipeline end to end before connecting production
traffic. Requires an existing Amazon CloudWatch integration in BigPanda; the payload normalizes through that integration's
parsing rules.
operationId: postOimCloudwatchAlerts
tags:
- Alert Ingestion (OIM)
parameters:
- name: access_token
in: query
description: ''
required: false
example: '{ACCESS_TOKEN}'
schema:
type: string
- name: app_key
in: query
description: ''
required: false
example: '{APP_KEY}'
schema:
type: string
- name: Content-Type
in: header
description: ''
required: false
example: application/json
schema:
type: string
- name: Authorization
in: header
description: ''
required: false
example: Bearer {BEARER_TOKEN}
schema:
type: string
requestBody:
content:
application/json:
schema:
type: object
properties:
updateDate:
type: string
cancelDate:
type: string
resourceId:
type: string
criticality:
type: string
incident_identifier:
type: string
Risk:
type: string
format: utc-millisec
type:
type: string
recommendations:
type: string
resourceKind:
type: string
alertName:
type: string
Efficiency:
type: string
format: utc-millisec
alertId:
type: string
__status:
type: string
timestamp:
type: integer
adapterKind:
type: string
Health:
type: string
format: utc-millisec
secondary_property:
type: string
impact:
type: string
resourceName:
type: string
primary_property:
type: string
subType:
type: string
alertURL:
type: string
format: uri
startDate:
type: string
status:
type: string
x-apidog-orders:
- updateDate
- cancelDate
- resourceId
- criticality
- incident_identifier
- Risk
- type
- recommendations
- resourceKind
- alertName
- Efficiency
- alertId
- __status
- timestamp
- adapterKind
- Health
- secondary_property
- impact
- resourceName
- primary_property
- subType
- alertURL
- startDate
- status
x--orders:
- updateDate
- cancelDate
- resourceId
- criticality
- incident_identifier
- Risk
- type
- recommendations
- resourceKind
- alertName
- Efficiency
- alertId
- __status
- timestamp
- adapterKind
- Health
- secondary_property
- impact
- resourceName
- primary_property
- subType
- alertURL
- startDate
- status
x--ignore-properties: []
responses:
'201':
x-apidog-ordering: 0
description: '201'
content:
application/json:
schema:
$ref: '#/components/schemas/generic201response2'
headers: {}
x-apidog-name: ''
x-publication-status: live
x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770234-run
x-source-url: https://api-docs.bigpanda.io/cloudwatch-37770234e0.md
x-source-page: CloudWatch
/oim/cribl/alerts:
post:
summary: Cribl
deprecated: false
description: Reference payload for Cribl. Shows the well-formed OIM alert payload shape for a Cribl source — send it
against a test integration's app key to validate the pipeline end to end before connecting production traffic. Requires
an existing Cribl integration in BigPanda; the payload normalizes through that integration's parsing rules.
operationId: postOimCriblAlerts
tags:
- Alert Ingestion (OIM)
parameters:
- name: access_token
in: query
description: ''
required: false
example: '{ACCESS_TOKEN}'
schema:
type: string
- name: app_key
in: query
description: ''
required: false
example: '{APP_KEY}'
schema:
type: string
- name: Content-Type
in: header
description: ''
required: false
example: application/json
schema:
type: string
- name: Authorization
in: header
description: ''
required: false
example: Bearer {BEARER_TOKEN}
schema:
type: string
requestBody:
content:
application/json:
schema:
type: array
items:
type: object
properties:
cluster:
type: string
host:
type: string
description:
type: string
check:
type: string
my_unique_attribute:
type: string
status:
type: string
timestamp:
type: integer
x-apidog-orders:
- cluster
- host
- description
- check
- my_unique_attribute
- status
- timestamp
x-apidog-ignore-properties: []
responses:
'201':
x-apidog-ordering: 0
description: '201'
content:
application/json:
schema:
$ref: '#/components/schemas/generic201response'
headers: {}
x-apidog-name: ''
x-publication-status: live
x-run-in-apidog: https://app.apidog.com/web/project/1203004/apis/api-37770235-run
x-source-url: https://api-docs.bigpanda.io/cribl-37770235e0.md
x-source-page: Cribl
/oim/datadog_v2/alerts:
post:
summary: DataDog
deprecated: false
description: Reference payload for Datadog. Shows the well-formed OIM alert payload shape for a Datadog source — send
it against a test integration's app key to validate the pipeline end to end before connecting production traffic.
Requires an existing Datadog integration in BigPanda; the payload normalizes through that integration's parsing rules.
operationId: postOimDatadogV2Alerts
tags:
- Alert Ingestion (OIM)
parameters:
- name: app_key
in: query
description: ''
required: false
example: '{app_key}'
schema:
type: string
- name: Content-Type
in: header
description: ''
required: false
example: application/json
schema:
type: string
- name: Authorization
in: header
description: ''
required: false
example: Bearer {ORG_BEARER_TOKEN}
schema:
type: string
requestBody:
content:
application/json:
schema:
type: object
properties:
date:
type: string
format: utc-millisec
automatic-restart:
type: string
internal-hostname:
type: string
project:
# --- truncated at 32 KB (215 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/bigpanda/refs/heads/main/openapi/bigpanda-alert-ingestion-oim-api-openapi.yml