Persist each alert identifier, organization, domain or host, event type, message, and observation time. Deduplicate records before creating tickets, and maintain a separate disposition in your case system.FullHunt returns recorded alerts. Webhook delivery, email, Slack, ticket creation, and scheduled collection must be implemented outside this endpoint.See Alert-to-Ticket Delivery for paginated collection, downstream idempotency, baseline mode, and checkpoint behavior.
