# Consolidated Alerts

Returns a list of audit trails.

**Sync Type: Incremental**

## Requirements

Before you connect Monad to Clumio, you need an Access Token, and need to determine the region of your account. 

[Create an API Service Token](https://help.clumio.com/docs/api-tokens#service-tokens)
[Determine the Region associated with your Clumio account](https://help.clumio.com/docs/aws-regions-supported-by-clumio)

## Details

Monad uses the `raised_timestamp` filter on the [API](https://help.clumio.com/reference/list-consolidated-alerts) to determine what data to display. This field is updated every time a request to get audit trails is successful with the last time a request to get audit trails was initiated. If this was the first time requesting for data, a full sync of the data is performed. 

## Configuration
The following configuration defines the input parameters. Each field's specifications, such as type, requirements, and descriptions, are detailed below.

#### Settings

| Setting | Type | Required | Description |
|---------|------|----------|-------------|
| Region | string | No | The region associated with your Clumio account. |
| Status | string | No | Filter by alert status (active, cleared). |
| Parent Entity Type | string | No | The system-generated name of the parent entity that is associated with the primary entity affected by the alert. |
| Parent Entity Value | string | No | The system-generated ID of the parent entity that is associated with the primary entity affected by the alert. |
| Backfill Start Time | string | No | The date to start fetching data from. If not specified, no past records will be fetched. |


#### Secrets

| Secret | Type | Required | Description |
|---------|------|----------|-------------|
| Access Token | string | Yes | Token used to authenticate with the Clumio APIs. |



## Sample Record

```json
{
  "_etag": "",
  "_links": {
    "_self": {
      "href": "/alerts/consolidated/2be1b00c-05f0-df99-9af0-388732423c76",
      "templated": false,
      "type": "get"
    },
    "update-consolidated-alert": {
      "href": "/alerts/consolidated/ab6a503b-7472-5608-da34-ed56a301f85b",
      "templated": false,
      "type": "patch"
    }
  },
  "active_entity_count": 22,
  "cause": "credits_consumed_within_30_days",
  "cleared_entity_count": 39,
  "cleared_timestamp": null,
  "details": {
    "cause": "Multiple restore operations have failed in the past hour.",
    "type": "Infrastructure Health"
  },
  "id": "ab0ebed8-287a-d197-4091-6b6cff205f8a",
  "notes": "Escalated to operations team for immediate attention",
  "parent_entity": {
    "id": "pg-1234",
    "type": "workspace",
    "value": "Production Environment"
  },
  "raised_timestamp": "2025-08-11T23:46:27.279393Z",
  "severity": "info",
  "status": "acknowledged",
  "type": "policy_violation",
  "updated_timestamp": "2025-08-11T23:46:27.279444Z"
}
```