BigPanda

BigPanda Alert Tags & Enrichment API

The Alert Tags & Enrichment API from BigPanda — 22 operation(s) for alert tags & enrichment.

GitHub OpenAPI

Operations 45

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /resources/v2.0/alerts-enrichments-jobs/{job_id} Check an Enrichment V2 mapping table upload job · Check Status of Upload Job #
Ask an LLM
“Has my Enrichment V2 mapping table upload finished processing?”
“What status does an Enrichment V2 upload job report while the mapping table is updating?”
Tell an agent
Check the status of Enrichment V2 upload job {job_id}.
Tell me whether Enrichment V2 job {job_id} finished updating the mapping table.
POST /resources/alert-enricher/schemas Create an advanced mapping schema · Create Advanced Mapping Schema #
Ask an LLM
“How do I create an advanced mapping schema in the Alert Enricher?”
“How many result tags can a single advanced mapping schema produce?”
Tell an agent
Create an advanced mapping schema named {name} of type {type} with config {config}.
Create an inactive advanced schema {name}, type {type}, config {config}, at execution order {execution_order}.
GET /resources/alert-enricher/schemas List advanced mapping schemas · Retrieve All Advanced Mapping Schemas #
Ask an LLM
“Which advanced mapping enrichment schemas does the Alert Enricher have set up?”
“Can I see every advanced mapping schema in BigPanda at once?”
Tell an agent
List all Alert Enricher advanced mapping schemas.
Pull the full list of advanced mapping enrichment schemas.
POST /resources/v2.0/alert-enrichments Create an Enrichment V2 enrichment item · Create Alert Enrichment Item #
Ask an LLM
“Can I add a new enrichment item with the older Enrichment V2 API?”
“Can an Enrichment V2 enrichment item apply only to alerts that match a condition?”
Tell an agent
Create an Enrichment V2 enrichment item of type {type} with config {config}.
Add an Enrichment V2 enrichment item that applies only when {when}, with the note {note}.
POST /resources/v2.1/enrichments-config/tags Create an alert tag · Create Alert Tag #
Ask an LLM
“How do I create a new alert tag with its own enrichments?”
“Can I create an alert tag that starts out inactive?”
Tell an agent
Create an active alert tag named {name} described as {description}.
Create alert tag {name} with enrichments {enrichments} and active set to {active}.
GET /resources/v2.1/enrichments-config/tags List alert tags (v2.1) · Retrieve All Alert Tags #
Ask an LLM
“What alert tags exist in the v2.1 enrichments config?”
“Can I pull all alert tags from the current v2.1 tags endpoint?”
Tell an agent
List all alert tags from the v2.1 enrichment config.
Show every configured alert tag using the v2.1 API.
POST /resources/v2.1/enrichments-config/tags/{alerttag_name}/enrichments Add enrichment items to an existing alert tag · Create Enrichment #
Ask an LLM
“Can I add a composition enrichment to an alert tag I already created?”
“What do I send to attach a new extraction rule to an existing tag?”
Tell an agent
Add enrichments {enrichments} to alert tag {alerttag_name}.
Create a new extraction enrichment item on the {alerttag_name} tag.
DELETE /resources/v2.1/enrichments-config/tags/{alerttag_name}/enrichments Delete enrichment items from an alert tag · Delete Enrichment Item #
Ask an LLM
“How do I remove a composition or extraction enrichment from an alert tag?”
“Can I delete several enrichment items from one tag in a single call?”
Tell an agent destructive · confirm first
Delete enrichment items {enrichments_ids} from alert tag {alerttag_name}.
Remove the extraction enrichment {enrichments_ids} on the {alerttag_name} tag.
PATCH /resources/v2.1/enrichments-config/tags/{alerttag_name}/enrichments Update enrichment items on an alert tag · Update Enrichment Item #
Ask an LLM
“Can I edit an extraction enrichment that's already on an alert tag?”
“What do I send to change an existing composition enrichment on a tag?”
Tell an agent
Update the existing enrichments on alert tag {alerttag_name} to {enrichments}.
Edit the current composition enrichment item on tag {alerttag_name}.
POST /resources/v2.1/mapping-enrichment Create a mapping enrichment schema (v2.1) · Create Mapping Enrichment Schema #
Ask an LLM
“How do I create a v2.1 mapping enrichment schema before uploading its table?”
“Can a new v2.1 mapping schema be limited to alerts matching a condition?”
Tell an agent
Create a v2.1 mapping enrichment schema with config {config}.
Create a v2.1 mapping enrichment schema that applies when {when}, noted as {note}.
GET /resources/v2.1/mapping-enrichment List mapping enrichment schemas (v2.1) · Retrieve All Mapping Enrichment Schemas #
Ask an LLM
“Which mapping enrichment schemas exist in the v2.1 enrichment API?”
“Can I list all of my v2.1 mapping enrichment schemas at once?”
Tell an agent
List all v2.1 mapping enrichment schemas.
Show the mapping enrichment schemas configured through v2.1.
POST /resources/alert-enricher/schemas/{schema_id}/rules Upload a full advanced mapping table as CSV · Create Mapping Enrichment Table #
Ask an LLM
“How do I replace an entire advanced mapping table by uploading a CSV?”
“Is the advanced map CSV upload processed asynchronously with a job to track?”
Tell an agent
Upload CSV {csvdata} as the complete table for advanced mapping schema {schema_id}.
Replace the whole map for advanced schema {schema_id} with the CSV file {csvdata}.
PUT /resources/alert-enricher/schemas/{schema_id}/rules Add or update rows in an advanced map · Create or Update Map Rows #
Ask an LLM
“Can I upsert rows into an advanced mapping table without re-uploading the CSV?”
“What ID does a brand-new row need when I add it to an Alert Enricher map?”
Tell an agent
Upsert these rows into advanced mapping schema {schema_id}.
Add new rows with freshly generated UUIDs to the advanced map {schema_id}.
DELETE /resources/alert-enricher/schemas/{schema_id}/rules Delete multiple rows from an advanced map · Delete Map Rows #
Ask an LLM
“Can I remove a batch of rows from an advanced mapping table in one call?”
“Is there a way to bulk-delete rows in an Alert Enricher map?”
Tell an agent destructive · confirm first
Delete the listed rows from advanced mapping schema {schema_id}.
Bulk-remove rows from advanced map {schema_id}.
GET /resources/alert-enricher/schemas/{schema_id}/rules Retrieve rows of an advanced mapping table · Retrieve Map Rows #
Ask an LLM
“Can I fetch only specific rows of an advanced mapping table by their IDs?”
“How do I page through all the rows of an Alert Enricher map?”
Tell an agent
Get rows {rule_ids} from advanced map {schema_id}.
List page {page} of the rows in advanced mapping schema {schema_id}, {per_page} per page.
POST /resources/v2.0/alert-enrichments/{mapschema_id}/map Add rows to an Enrichment V2 mapping table · Create Mapping Enrichment Table Rows #
Ask an LLM
“Can I append rows to an existing Enrichment V2 mapping table?”
“What operation do I send to add rows to an Enrichment V2 map?”
Tell an agent
Add rows {value} to Enrichment V2 mapping table {mapschema_id} with op {op}.
Append new rows {value} to the Enrichment V2 map {mapschema_id}.
GET /resources/v2.0/alert-enrichments/{mapschema_id}/map Retrieve an Enrichment V2 mapping table · Retrieve Mapping Enrichment #
Ask an LLM
“Can I view the contents of an Enrichment V2 mapping table?”
“What rows are in my older Enrichment V2 enrichment map?”
Tell an agent
Get the Enrichment V2 map for mapping schema {mapschema_id}.
Show the Enrichment V2 mapping table {mapschema_id}.
PATCH /resources/v2.0/alert-enrichments/{mapschema_id}/map Update rows in an Enrichment V2 mapping table · Update Mapping Enrichment Table Rows #
Ask an LLM
“How do I change existing rows in an Enrichment V2 mapping table?”
“Can I edit specific rows of an Enrichment V2 map without re-uploading it?”
Tell an agent
Update rows in Enrichment V2 mapping table {mapschema_id} to {value} using op {op}.
Edit existing Enrichment V2 map rows in {mapschema_id} to {value}.
POST /resources/v2.1/mapping-enrichment/{mapschema_id}/map Upload a v2.1 mapping table from CSV · Create mapping enrichment table using CSV #
Ask an LLM
“How do I upload a CSV mapping table for a v2.1 mapping schema?”
“What content type does the v2.1 mapping table CSV upload expect?”
Tell an agent
Upload a CSV as the v2.1 mapping table for schema {mapschema_id}.
Upload the enrichment map for v2.1 schema {mapschema_id} with content type {content_type}.
PATCH /resources/v2.1/mapping-enrichment/{mapschema_id}/map Create, update, or delete a v2.1 mapping row · Create, Update, or Delete Mapping Enrichment Row #
Ask an LLM
“Can I add, change, or remove a single row in a v2.1 mapping table?”
“How do I delete one row from a v2.1 mapping enrichment table?”
Tell an agent
Apply op {op} with row {value} to v2.1 mapping table {mapschema_id}.
Remove row {value} from the v2.1 map {mapschema_id}.
GET /resources/v2.1/mapping-enrichment/{mapschema_id}/map Retrieve a v2.1 mapping enrichment table · Retrieve Mapping Enrichment Table #
Ask an LLM
“Can I page through a v2.1 mapping enrichment table as JSON?”
“What format does a v2.1 mapping table come back in after its CSV upload?”
Tell an agent
Get page {page} of v2.1 mapping table {mapschema_id}.
Show the v2.1 mapping enrichment table {mapschema_id}, {per_page} rows per page.
DELETE /resources/alert-enricher/schemas/{schema_id} Delete an advanced mapping schema · Delete Advanced Mapping Schema #
Ask an LLM
“How do I delete an advanced mapping schema I no longer use?”
“Can I remove an Alert Enricher schema entirely?”
Tell an agent destructive · confirm first
Delete advanced mapping schema {schema_id}.
Remove Alert Enricher schema {schema_id} permanently.
GET /resources/alert-enricher/schemas/{schema_id} Retrieve an advanced mapping schema · Retrieve Advanced Mapping Schema #
Ask an LLM
“Can I look up one advanced mapping schema's config by ID?”
“What settings does a given Alert Enricher schema have?”
Tell an agent
Get advanced mapping schema {schema_id}.
Show the config of Alert Enricher schema {schema_id}.
PUT /resources/alert-enricher/schemas/{schema_id} Update an advanced mapping schema · Update Advanced Mapping Schema #
Ask an LLM
“Can I rename or reconfigure an existing advanced mapping schema?”
“Can I change where an advanced mapping schema falls in the execution order?”
Tell an agent
Update advanced schema {schema_id} with name {name}, type {type} and config {config}.
Move advanced schema {schema_id} to execution order {execution_order}, keeping name {name}, type {type}, config {config}.
DELETE /resources/v2.0/alert-enrichments/{enrichment_id} Delete an Enrichment V2 enrichment item · Delete Alert Enrichment Item #
Ask an LLM
“How do I delete one enrichment item in Enrichment V2?”
“Can I remove an Enrichment V2 item by its ID?”
Tell an agent destructive · confirm first
Delete Enrichment V2 item {enrichment_id}.
Remove enrichment item {enrichment_id} from Enrichment V2.
GET /resources/v2.0/alert-enrichments/{enrichment_id} Retrieve an Enrichment V2 enrichment item · Retrieve Alert Enrichment Item #
Ask an LLM
“Can I look up a single Enrichment V2 enrichment item by ID?”
“What's configured on a specific Enrichment V2 item?”
Tell an agent
Get Enrichment V2 item {enrichment_id}.
Show the config of enrichment item {enrichment_id} from Enrichment V2.
PATCH /resources/v2.0/alert-enrichments/{enrichment_id} Update an Enrichment V2 enrichment item · Update Alert Enrichment Item #
Ask an LLM
“Can I deactivate an existing Enrichment V2 enrichment item?”
“Can I change the condition on an Enrichment V2 item after creating it?”
Tell an agent
Update Enrichment V2 item {enrichment_id} with config {config}.
Change the condition on Enrichment V2 item {enrichment_id} to {when}.
DELETE /resources/v2.1/enrichments-config/tags/{alerttag_name} Delete an alert tag · Delete Alert Tag #
Ask an LLM
“How do I delete an alert tag I no longer need?”
“Can I remove an alert tag from the enrichment config entirely?”
Tell an agent destructive · confirm first
Delete alert tag {alerttag_name}.
Remove the {alerttag_name} tag from the enrichment config.
GET /resources/v2.1/enrichments-config/tags/{alerttag_name} Retrieve an alert tag · Retrieve Alert Tag #
Ask an LLM
“Can I look up one alert tag's settings by name?”
“What does the v2.1 config say about a specific alert tag?”
Tell an agent
Get alert tag {alerttag_name}.
Show the v2.1 definition of the {alerttag_name} tag.
PATCH /resources/v2.1/enrichments-config/tags/{alerttag_name} Update an alert tag's description or active state · Update Alert Tag Data #
Ask an LLM
“Can I deactivate an alert tag without deleting it?”
“How do I change an alert tag's description?”
Tell an agent
Set the description of alert tag {alerttag_name} to {description}.
Set alert tag {alerttag_name} active to {active}.
DELETE /resources/alert-enricher/schemas/{schema_id}/rules/{row_id} Delete one row from an advanced map · Delete Mapping Enrichment Row #
Ask an LLM
“Can I delete a single row from an advanced mapping table by its row ID?”
“What do I call to remove just one Alert Enricher map row?”
Tell an agent destructive · confirm first
Delete row {row_id} from advanced mapping schema {schema_id}.
Remove Alert Enricher map row {row_id} in schema {schema_id}.
PATCH /resources/alert-enricher/schemas/{schema_id}/rules/{row_id} Update one row in an advanced map · Update Mapping Enrichment Row #
Ask an LLM
“Can I edit a single row in an advanced mapping table?”
“Which row ID do I send to change one Alert Enricher map row?”
Tell an agent
Update row {row_id} in advanced mapping schema {schema_id}.
Change the values of Alert Enricher map row {row_id} in {schema_id}, with row id {id}.
DELETE /resources/v2.1/mapping-enrichment/{mapschema_id} Delete a v2.1 mapping enrichment schema · Delete Mapping Enrichment Schema #
Ask an LLM
“How do I delete a v2.1 mapping enrichment schema?”
“Can I remove a v2.1 mapping schema I set up by mistake?”
Tell an agent destructive · confirm first
Delete v2.1 mapping enrichment schema {mapschema_id}.
Remove v2.1 mapping schema {mapschema_id}.
GET /resources/v2.1/mapping-enrichment/{mapschema_id} Retrieve a v2.1 mapping enrichment schema · Retrieve Mapping Enrichment Schema #
Ask an LLM
“Can I view one v2.1 mapping enrichment schema's definition?”
“What condition and note are set on a particular v2.1 mapping schema?”
Tell an agent
Get v2.1 mapping enrichment schema {mapschema_id}.
Show the definition of v2.1 mapping schema {mapschema_id}.
PATCH /resources/v2.1/mapping-enrichment/{mapschema_id} Update a v2.1 mapping schema's state, condition or note · Update Mapping Enrichment Schema #
Ask an LLM
“Which fields of a v2.1 mapping schema can I still change after creating it?”
“Can I turn off a v2.1 mapping enrichment schema without deleting it?”
Tell an agent
Deactivate v2.1 mapping schema {mapschema_id}.
Change the condition on v2.1 mapping schema {mapschema_id} to {when} with note {note}.
GET /resources/v2.0/enrichments-config/tags List alert tags (Enrichment V2) · List All Alert Tags #
Ask an LLM
“Which alert tags does my org have under the older Enrichment V2 API?”
“Can I list every alert tag through Enrichment V2?”
Tell an agent
List all alert tags via Enrichment V2.
Show my organization's alert tags using the Enrichment V2 endpoint.
GET /resources/v2.0/enrichments-config/tags/{alerttag_name} List a tag's enrichment items (Enrichment V2) · List All Enrichment Items of a Tag #
Ask an LLM
“What enrichment items make up an alert tag in Enrichment V2?”
“Can I see all the Enrichment V2 items attached to one tag?”
Tell an agent
List the Enrichment V2 items for tag {alerttag_name}.
Show every enrichment item on the {alerttag_name} tag in Enrichment V2.
GET /resources/v2.1/alert-enrichments-jobs/{job_id} Check a v2.1 mapping table job status · Retrieve Mapping Table Job Status #
Ask an LLM
“Did my last v2.1 enrichment change finish?”
“What status does a v2.1 mapping table job return?”
Tell an agent
Check v2.1 mapping table job {job_id}.
Get the status of v2.1 enrichment job {job_id}.
GET /resources/alert-enricher/jobs/{job_id} Check an advanced map upload job · Retrieve Upload Job Status #
Ask an LLM
“Has my advanced mapping CSV upload finished?”
“Can I track an Alert Enricher map upload by its job ID?”
Tell an agent
Check Alert Enricher upload job {job_id}.
Get the upload status of advanced map job {job_id}.
GET /resources/v2.0/enrichments-config/tags/{alerttag_name}/order Get a tag's enrichment item order (Enrichment V2) · Retrieve enrichment item order #
Ask an LLM
“In what order do an alert tag's enrichment items run under Enrichment V2?”
“Can I see the Enrichment V2 execution order of the items on one tag?”
Tell an agent
Get the Enrichment V2 item order for tag {alerttag_name}.
Show which enrichment items run first on tag {alerttag_name} in Enrichment V2.
PUT /resources/v2.0/enrichments-config/tags/{alerttag_name}/order Reorder a tag's enrichment items (Enrichment V2) · Update Enrichment Items Order #
Ask an LLM
“Can I change which enrichment items run first on a tag with Enrichment V2?”
“What order do Enrichment V2 items run in if I never set one for the tag?”
Tell an agent
Reorder the Enrichment V2 items on tag {alerttag_name}.
Set a new Enrichment V2 enrichment_order for tag {alerttag_name}.
GET /resources/v2.0/enrichments-config Get the alert tag execution order (Enrichment V2) · Retrieve tags order #
Ask an LLM
“In what order do my alert tags run under Enrichment V2?”
“Can I see the Enrichment V2 alert_tags_order list?”
Tell an agent
Get the Enrichment V2 tag execution order.
Show which alert tags run first in Enrichment V2.
PUT /resources/v2.0/enrichments-config Reorder alert tags (Enrichment V2) · Update tag order #
Ask an LLM
“Can I change the order my alert tags run in with Enrichment V2?”
“How do I move a tag earlier in the Enrichment V2 alert_tags_order?”
Tell an agent
Set the Enrichment V2 tag order to {alert_tags_order}.
Reorder Enrichment V2 alert tags as {alert_tags_order}.
PUT /resources/v2.1/enrichments-config Reorder alert tags (v2.1) · Update Alert Tag Order #
Ask an LLM
“How do I change the run order of alert tags using v2.1?”
“Can I make one tag run before another with the v2.1 config?”
Tell an agent
Set the v2.1 alert tag run order to {alert_tags_order}.
Update the v2.1 tag run order so tags run as {alert_tags_order}.
PUT /resources/v2.1/enrichments-config/tags/{alerttag_name}/order Reorder a tag's enrichment items (v2.1) · Update Enrichment Item Order for an Alert Tag #
Ask an LLM
“Can I change the order of composition or extraction items on a tag in v2.1?”
“What does v2.1 need from me to reorder a tag's enrichment items?”
Tell an agent
Set the v2.1 enrichment order on tag {alerttag_name} to {enrichment_order}.
Reorder tag {alerttag_name}'s v2.1 enrichment items as {enrichment_order}.

Documentation

📖
Documentation
https://api-docs.bigpanda.io/agents
📖
APIReference
https://api-docs.bigpanda.io/agents
📖
Documentation
https://api-docs.bigpanda.io/alert-tags-and-enrichment
📖
APIReference
https://api-docs.bigpanda.io/alert-tags-and-enrichment
📖
Documentation
https://api-docs.bigpanda.io/major-incident-management-mim
📖
APIReference
https://api-docs.bigpanda.io/major-incident-management-mim
📖
Documentation
https://api-docs.bigpanda.io/sso-an-jit-provisioning
📖
APIReference
https://api-docs.bigpanda.io/sso-an-jit-provisioning

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/bigpanda/refs/heads/main/openapi/bigpanda-alert-tags-enrichment-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/bigpanda:bigpanda-alert-tags-enrichment-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

bigpanda-alert-tags-enrichment-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: BigPanda Alert Tags & Enrichment API
  description: BigPanda Alert Tags & Enrichment operations, assembled verbatim from the OpenAPI fragments BigPanda publishes on its own API reference at https://api-docs.bigpanda.io/. Each operation carries x-source-url naming the exact provider page it was read from. BigPanda hosts each organization in a single data management region (US or EU); send requests to the base URL for your region.
  version: 1.0.0
  contact:
    name: BigPanda Support
    url: https://api-docs.bigpanda.io/
  license:
    name: Proprietary
    url: https://www.bigpanda.io/legal/
  x-provenance:
    method: searched
    source: https://api-docs.bigpanda.io/llms.txt
    harvested: '2026-09-04'
    assembly: 'Operations copied verbatim from the per-endpoint OpenAPI 3.0.1 fragments BigPanda publishes at https://api-docs.bigpanda.io/<endpoint>.md. Assembly-only normalizations: Apidog x-apidog security metadata stripped, securityScheme type "bearer" corrected to type http/scheme bearer, schema name collisions suffixed. No operation, parameter, schema or response was authored by API Evangelist.'
    operations: 45
servers:
- url: https://api.bigpanda.io
  description: US Region
- url: https://api.eu.bigpanda.io
  description: EU Region
tags:


# --- truncated at 32 KB (135 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/bigpanda/refs/heads/main/openapi/bigpanda-alert-tags-enrichment-api-openapi.yml