​
In workflows

This provider can be used in workflows.

As “step” to query data, example:

steps:
    - name: Query keep
      provider: keep
      config: "{{ provider.my_provider_name }}"
      with:
        filters: {value}  # filters to query Keep (only for version 1)
        version: {value}  # version of Keep API
        distinct: {value}  # if True, return only distinct alerts
        time_delta: {value}  # time delta in days to query Keep
        timerange: {value}  # timerange dict to calculate time delta
        filter: {value}  # filter to query Keep (only for version 2)
        limit: {value}  # limit number of results (only for version 2)

As “action” to make changes or update data, example:

actions:
    - name: Query keep
      provider: keep
      config: "{{ provider.my_provider_name }}"
      with:
        delete_all_other_workflows: {value}  # if True, delete all other workflows
        workflow_full_sync: {value}  # if True, sync all workflows
        workflow_to_update_yaml: {value}  # workflow yaml to update
        alert: {value}  # alert data to create
        fingerprint_fields: {value}  # fields to use for alert fingerprinting
        override_source_with: {value}  # override alert source
        read_only: {value}  # if True, don't modify existing alerts
        fingerprint: {value}  # alert fingerprint
        if: {value}  # condition to evaluate for alert creation
        for: {value}  # duration for state alerts

Check the following workflow examples:

​
Authentication Parameters

To use the Keep provider, you must authenticate with an API token associated with your Keep account. This token can be generated from your Keep dashboard.

​
Connecting with the Provider

  1. Log in to your Keep account.
  2. Navigate to the API section of your account dashboard and generate an API token.
  3. Use this token to authenticate when querying alerts via the Keep provider.