This provider can be used in workflows.As “step” to query data, example:
Copy
steps: - name: Query keep provider: keep config: "{{ provider.my_provider_name }}" with: filters: {value} # filters to query Keep (only for version 1) version: {value} # version of Keep API distinct: {value} # if True, return only distinct alerts time_delta: {value} # time delta in days to query Keep timerange: {value} # timerange dict to calculate time delta filter: {value} # filter to query Keep (only for version 2) limit: {value} # limit number of results (only for version 2)
As “action” to make changes or update data, example:
Copy
actions: - name: Query keep provider: keep config: "{{ provider.my_provider_name }}" with: delete_all_other_workflows: {value} # if True, delete all other workflows workflow_full_sync: {value} # if True, sync all workflows workflow_to_update_yaml: {value} # workflow yaml to update alert: {value} # alert data to create fingerprint_fields: {value} # fields to use for alert fingerprinting override_source_with: {value} # override alert source read_only: {value} # if True, don't modify existing alerts fingerprint: {value} # alert fingerprint if: {value} # condition to evaluate for alert creation for: {value} # duration for state alerts
To use the Keep provider, you must authenticate with an API token associated with your Keep account. This token can be generated from your Keep dashboard.