创建或替换富化规则
curl --request POST \
--url 'https://api.flashcat.cloud/enrichment/upsert?app_key=' \
--header 'Content-Type: application/json' \
--data '
{
"integration_id": 5001,
"rules": [
{
"kind": "extraction",
"settings": {
"source_field": "labels.env",
"result_label": "environment",
"pattern": "(?P<result>prod|staging|dev)",
"override": true
}
}
]
}
'import requests
url = "https://api.flashcat.cloud/enrichment/upsert?app_key="
payload = {
"integration_id": 5001,
"rules": [
{
"kind": "extraction",
"settings": {
"source_field": "labels.env",
"result_label": "environment",
"pattern": "(?P<result>prod|staging|dev)",
"override": True
}
}
]
}
headers = {"Content-Type": "application/json"}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {'Content-Type': 'application/json'},
body: JSON.stringify({
integration_id: 5001,
rules: [
{
kind: 'extraction',
settings: {
source_field: 'labels.env',
result_label: 'environment',
pattern: '(?P<result>prod|staging|dev)',
override: true
}
}
]
})
};
fetch('https://api.flashcat.cloud/enrichment/upsert?app_key=', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.flashcat.cloud/enrichment/upsert?app_key=",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'integration_id' => 5001,
'rules' => [
[
'kind' => 'extraction',
'settings' => [
'source_field' => 'labels.env',
'result_label' => 'environment',
'pattern' => '(?P<result>prod|staging|dev)',
'override' => true
]
]
]
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.flashcat.cloud/enrichment/upsert?app_key="
payload := strings.NewReader("{\n \"integration_id\": 5001,\n \"rules\": [\n {\n \"kind\": \"extraction\",\n \"settings\": {\n \"source_field\": \"labels.env\",\n \"result_label\": \"environment\",\n \"pattern\": \"(?P<result>prod|staging|dev)\",\n \"override\": true\n }\n }\n ]\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.flashcat.cloud/enrichment/upsert?app_key=")
.header("Content-Type", "application/json")
.body("{\n \"integration_id\": 5001,\n \"rules\": [\n {\n \"kind\": \"extraction\",\n \"settings\": {\n \"source_field\": \"labels.env\",\n \"result_label\": \"environment\",\n \"pattern\": \"(?P<result>prod|staging|dev)\",\n \"override\": true\n }\n }\n ]\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.flashcat.cloud/enrichment/upsert?app_key=")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n \"integration_id\": 5001,\n \"rules\": [\n {\n \"kind\": \"extraction\",\n \"settings\": {\n \"source_field\": \"labels.env\",\n \"result_label\": \"environment\",\n \"pattern\": \"(?P<result>prod|staging|dev)\",\n \"override\": true\n }\n }\n ]\n}"
response = http.request(request)
puts response.read_body{
"request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
"data": {}
}{
"request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
"error": {
"code": "InvalidParameter",
"message": "The specified parameter is not valid."
}
}{
"request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
"error": {
"code": "Unauthorized",
"message": "You are unauthorized."
}
}{
"request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
"error": {
"code": "RequestTooFrequently",
"message": "Request too frequently."
}
}{
"request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
"error": {
"code": "InternalError",
"message": "We encountered an internal error, and it has been reported. Please try again later."
}
}标签增强
创建或替换富化规则
创建或全量替换指定集成的告警富化规则集,rules 数组将被原子替换。
POST
/
enrichment
/
upsert
创建或替换富化规则
curl --request POST \
--url 'https://api.flashcat.cloud/enrichment/upsert?app_key=' \
--header 'Content-Type: application/json' \
--data '
{
"integration_id": 5001,
"rules": [
{
"kind": "extraction",
"settings": {
"source_field": "labels.env",
"result_label": "environment",
"pattern": "(?P<result>prod|staging|dev)",
"override": true
}
}
]
}
'import requests
url = "https://api.flashcat.cloud/enrichment/upsert?app_key="
payload = {
"integration_id": 5001,
"rules": [
{
"kind": "extraction",
"settings": {
"source_field": "labels.env",
"result_label": "environment",
"pattern": "(?P<result>prod|staging|dev)",
"override": True
}
}
]
}
headers = {"Content-Type": "application/json"}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {'Content-Type': 'application/json'},
body: JSON.stringify({
integration_id: 5001,
rules: [
{
kind: 'extraction',
settings: {
source_field: 'labels.env',
result_label: 'environment',
pattern: '(?P<result>prod|staging|dev)',
override: true
}
}
]
})
};
fetch('https://api.flashcat.cloud/enrichment/upsert?app_key=', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.flashcat.cloud/enrichment/upsert?app_key=",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'integration_id' => 5001,
'rules' => [
[
'kind' => 'extraction',
'settings' => [
'source_field' => 'labels.env',
'result_label' => 'environment',
'pattern' => '(?P<result>prod|staging|dev)',
'override' => true
]
]
]
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.flashcat.cloud/enrichment/upsert?app_key="
payload := strings.NewReader("{\n \"integration_id\": 5001,\n \"rules\": [\n {\n \"kind\": \"extraction\",\n \"settings\": {\n \"source_field\": \"labels.env\",\n \"result_label\": \"environment\",\n \"pattern\": \"(?P<result>prod|staging|dev)\",\n \"override\": true\n }\n }\n ]\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.flashcat.cloud/enrichment/upsert?app_key=")
.header("Content-Type", "application/json")
.body("{\n \"integration_id\": 5001,\n \"rules\": [\n {\n \"kind\": \"extraction\",\n \"settings\": {\n \"source_field\": \"labels.env\",\n \"result_label\": \"environment\",\n \"pattern\": \"(?P<result>prod|staging|dev)\",\n \"override\": true\n }\n }\n ]\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.flashcat.cloud/enrichment/upsert?app_key=")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n \"integration_id\": 5001,\n \"rules\": [\n {\n \"kind\": \"extraction\",\n \"settings\": {\n \"source_field\": \"labels.env\",\n \"result_label\": \"environment\",\n \"pattern\": \"(?P<result>prod|staging|dev)\",\n \"override\": true\n }\n }\n ]\n}"
response = http.request(request)
puts response.read_body{
"request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
"data": {}
}{
"request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
"error": {
"code": "InvalidParameter",
"message": "The specified parameter is not valid."
}
}{
"request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
"error": {
"code": "Unauthorized",
"message": "You are unauthorized."
}
}{
"request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
"error": {
"code": "RequestTooFrequently",
"message": "Request too frequently."
}
}{
"request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
"error": {
"code": "InternalError",
"message": "We encountered an internal error, and it has been reported. Please try again later."
}
}限制说明
| 项目 | 说明 |
|---|---|
| 速率限制 | 每个账户 1,000 次/分钟;50 次/秒 |
| 权限要求 | 协作空间管理(on-call) 或 集成中心管理(on-call) |
使用说明
- 富化规则按顺序依次执行。
- 每条规则有一个
kind:extraction(正则/gjson 提取)、composition(模板组合标签)、mapping(通过映射规则或 API 查找)、drop(删除标签)。 - 可选的
if字段为AndFilters条件,不匹配时跳过该规则。 kind: extraction:source_field须为title、description或labels.*前缀的键;pattern(正则,须包含命名分组result)和g_json(GJson 路径)二选一。kind: composition:template使用 Go text/template 语法,可引用labels.*键。kind: mapping:mapping_type为schema(默认)或api;分别提供schema_id或api_id。kind: drop:drop_labels列出要删除的标签键名。- 每次调用都会记录到账户审计日志,请不要把敏感信息放在请求字段中。
授权
在 Flashduty 控制台 账户 → APP Key 中签发的 app_key。调用任何公开 API 时都必须携带。它等同于所属账户的身份凭证,请妥善保管。
请求体
application/json
此页面对您有帮助吗?
⌘I