Palo Alto Networks · JSON Structure

Prisma Sd Wan Api Alarm Structure

Alarm schema from Palo Alto Networks Prisma SD-WAN API

Type: object Properties: 12
Cloud SecurityCybersecurityFirewallNetwork SecuritySASESOARThreat IntelligenceXDR

Alarm is a JSON Structure definition published by Palo Alto Networks, describing 12 properties. It conforms to the https://json-structure.org/meta/core/v0/# meta-schema.

Properties

id type severity site_id site_name element_id message acknowledged acknowledged_by acknowledged_at raised_at cleared_at

Meta-schema: https://json-structure.org/meta/core/v0/#

JSON Structure

Raw ↑ 
{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-structure/prisma-sd-wan-api-alarm-structure.json",
  "name": "Alarm",
  "description": "Alarm schema from Palo Alto Networks Prisma SD-WAN API",
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "Unique alarm identifier."
    },
    "type": {
      "type": "string",
      "description": "Alarm type identifier."
    },
    "severity": {
      "type": "string",
      "description": "Alarm severity level.",
      "enum": [
        "critical",
        "major",
        "minor",
        "info"
      ]
    },
    "site_id": {
      "type": "string",
      "description": "Site where the alarm was generated."
    },
    "site_name": {
      "type": "string",
      "description": "Name of the site where the alarm was generated."
    },
    "element_id": {
      "type": "string",
      "description": "ION element identifier that generated the alarm."
    },
    "message": {
      "type": "string",
      "description": "Human-readable alarm description."
    },
    "acknowledged": {
      "type": "boolean",
      "description": "Whether the alarm has been acknowledged."
    },
    "acknowledged_by": {
      "type": "string",
      "description": "User who acknowledged the alarm."
    },
    "acknowledged_at": {
      "type": "datetime",
      "description": "Timestamp when the alarm was acknowledged."
    },
    "raised_at": {
      "type": "datetime",
      "description": "Timestamp when the alarm was raised."
    },
    "cleared_at": {
      "type": "datetime",
      "description": "Timestamp when the alarm was cleared. Null if still active."
    }
  }
}