> ## Documentation Index
> Fetch the complete documentation index at: https://docs.plerion.com/llms.txt
> Use this file to discover all available pages before exploring further.

# plerion alerts

> View risk-based alerts.

With **plerion alerts**, you can view and filter risk-based alerts across your cloud environments with support for status, provider, alert type, and other filters.

<Tip>
  For more about alerts in the Plerion dashboard, see [Alerts overview](/guides/platform/alerts-overview).
</Tip>

***

## Synopsis

```bash theme={"system"}
plerion alerts list [options]
```

***

## Subcommands

### list

List risk-based alerts with filtering and sorting.

```bash theme={"system"}
plerion alerts list [options]
```

#### Options

| Flag               | Type    | Description                                                            |
| ------------------ | ------- | ---------------------------------------------------------------------- |
| `--status`         | string  | `OPEN` or `RESOLVED`                                                   |
| `--provider`       | string  | Cloud provider: `AWS`, `Azure`, `GCP`, `Kubernetes` (case-insensitive) |
| `--alert-type`     | string  | `ASSET` or `FINDING`                                                   |
| `--flagged`        | boolean | Filter by flagged status (`true` or `false`)                           |
| `--acknowledged`   | boolean | Filter by acknowledged status (`true` or `false`)                      |
| `--sort-by`        | string  | `riskScore` or `discoveredDate`                                        |
| `--sort-order`     | string  | `asc` or `desc`                                                        |
| `--ids`            | string  | Filter by alert IDs (comma-separated)                                  |
| `--workflow-id`    | string  | Filter by workflow IDs (comma-separated)                               |
| `--asset-group-id` | string  | Filter by asset group IDs (comma-separated)                            |
| `--resource-type`  | string  | Filter by resource types (comma-separated)                             |
| `--integration-id` | string  | Filter by integration IDs (comma-separated)                            |
| `--per-page`       | number  | Results per page (default: 50, max: 1000)                              |
| `--all`            | flag    | Fetch all pages automatically                                          |

***

## Examples

```bash theme={"system"}
# Open alerts sorted by risk score (highest first)
plerion alerts list --status OPEN --sort-by riskScore --sort-order desc

# Flagged alerts only
plerion alerts list --flagged true

# Asset-type alerts
plerion alerts list --alert-type ASSET --output table

# All AWS alerts as JSON
plerion alerts list --provider AWS --output json

# Fetch all alerts across all pages
plerion alerts list --all --output json
```

***

## Output columns

Table output includes all fields returned by the API:

| Column         | Description                  |
| -------------- | ---------------------------- |
| ID             | Alert ID                     |
| TITLE          | Alert title                  |
| STATUS         | `OPEN` or `RESOLVED`         |
| TYPE           | `ASSET` or `FINDING`         |
| RISK SCORE     | Numeric risk score           |
| FLAGGED        | Whether flagged              |
| ACKNOWLEDGED   | Whether acknowledged         |
| TENANT ID      | Tenant ID                    |
| INTEGRATION ID | Integration ID               |
| WORKFLOW ID    | Associated workflow ID       |
| PROVIDER       | Cloud provider               |
| SERVICE        | Cloud service                |
| REGION         | Cloud region                 |
| RESOURCE ID    | Resource identifier          |
| RESOURCE TYPE  | Resource type                |
| RESOURCE NAME  | Resource name                |
| ACCOUNT ID     | Cloud account ID             |
| FIRST OBSERVED | First observed timestamp     |
| DISCOVERED     | Alert discovery timestamp    |
| LAST SCANNED   | Last scan timestamp          |
| RULES CHANGED  | Rules last changed timestamp |
| CLOSED AT      | Closed timestamp             |
| CREATED AT     | Record creation timestamp    |
| UPDATED AT     | Record update timestamp      |
