Solarwinds API

Soumaya

Hello,

Could you please give me the SolarWinds API that can be used by another application to retrieve all alerts for further processing.

Thank you

jeremymayfield

To retrieve all alerts from a SolarWinds Orion Platform instance programmatically, you should use the SolarWinds API, specifically via SWIS (SolarWinds Information Service). The API exposes alerts, their properties, statuses, and related metadata.

1. API Endpoint Overview

SolarWinds exposes a REST-like interface via SWIS, usually reachable at:

https://<SolarWindsServer>/SolarWinds/InformationService/v3/Json/

All API operations use this base URL, appended with methods such as Query, QueryMultiple, Invoke, etc.

2. Retrieve All Alerts (Active & Inactive)

Use SWQL to pull alert definitions and status:

Sample REST API Request (GET)

GET /SolarWinds/InformationService/v3/Json/Query?q=SELECT    AlertID,    Name,    Enabled,    Severity,    TriggeredCount,    LastTriggered,    ActiveFROM    Orion.AlertConfigurations

Full URL example:

https://<SolarWindsServer>/SolarWinds/InformationService/v3/Json/Query?q=SELECT AlertID,Name,Enabled,Severity,TriggeredCount,LastTriggered,Active FROM Orion.AlertConfigurations

Returns: All configured alerts and key properties.

3. Retrieve Alert History / Triggered Alerts

SolarWinds stores triggered alert events in:

• Orion.AlertActive — currently active alert instances
• Orion.AlertHistory — historical alert events

Active Alerts

GET /SolarWinds/InformationService/v3/Json/Query?q=SELECT AlertActiveID, AlertID, NodeID, TriggerTime, Acknowledged, ClearedTimeFROM Orion.AlertActive

Alert History (Triggered Records)

GET /SolarWinds/InformationService/v3/Json/Query?q=SELECT AlertHistoryID, AlertID, NodeID, TriggerTime, Message, ActionTakenFROM Orion.AlertHistoryORDER BY TriggerTime DESC

4. Filtering by Time or Severity

Example — alerts triggered in the last 24 hours:

GET /SolarWinds/InformationService/v3/Json/Query?q=SELECT AlertHistoryID,AlertID,TriggerTimeFROM Orion.AlertHistoryWHERE TriggerTime >= @Ago24Hours 

Where @Ago24Hours is a SWQL macro for “24 hours ago.” Add Severity = X if needed.

5. Retrieve Alert Actions (Notifications)

If you need the configured email/page/URL actions:

GET /SolarWinds/InformationService/v3/Json/Query?q=SELECT ActionID, Name, Type, Enabled FROM Orion.AlertActions

6. Authentication

SolarWinds API supports:

Method	Supported
Basic Auth (username/password)	✔
API Token	✔
Integrated Windows Auth (NTLM/Kerberos)	✔

Example Header for Basic Auth:

Authorization: Basic <Base64(username:password)>

7. Sample JSON Response Format

Typical REST response looks like:

{  "results": [    {      "AlertID": 123,      "Name": "High CPU Usage",      "Severity": 3,      "Enabled": true,      "TriggeredCount": 42,      "LastTriggered": "2026-01-15T14:23:11Z",      "Active": false    },    …  ]}

8. SDK & Client Libraries

SolarWinds supports client libraries in:

• C# (.NET)
• PowerShell (SwisPowerShell)
• Python via requests or swis-py

Example PowerShell (SwisModule):

Connect-Swis -Hostname solarwinds.example.com -Username svc_api -Password MyPassword$query = "SELECT AlertID,Name,Severity FROM Orion.AlertConfigurations"Get-SwisData -SwisConnection $swis -Query $query

9. Practical Integration Example

Python (Requests)

import requestsurl = "https://solarwinds.example.com/SolarWinds/InformationService/v3/Json/Query"params = {    "q": "SELECT AlertHistoryID,AlertID,Message,TriggerTime FROM Orion.AlertHistory"}auth = ("api_user", "password")response = requests.get(url, params=params, auth=auth, verify=False)data = response.json()print(data)

10. Deliverables Recap

Purpose	SWIS Resource
Alert definitions	Orion.AlertConfigurations
Active alerts	Orion.AlertActive
Alert history	Orion.AlertHistory
Alert actions	Orion.AlertActions