Can I retrieve all the events that are included in a single alert using Panther API?

Last updated: November 7, 2025

QUESTION

Can I retrieve all the event payloads that are included in a single alert using Panther API?

ANSWER

Yes, you can use the REST API endpoint GET /alerts/{id}/events:

  • Create an API token in your Panther Console

  • Pass the API token and the alert ID in your API call

Screenshot 2025-10-31 at 4.47.51 PM.png
  • Get the events under the results in your calls Response Body.

Screenshot 2025-10-31 at 2.28.06 PM.png

For additional context about REST API and how to interact with your Panther entities check our documentation page.