AlertDeviceUnassigned

Emitted when an alert stops being active on a device, one event per device.

Payload

Field	Type	Required	Description
alertRuleUid	string | null	✅	Identifier of the alert rule the alert was created from. null only on historical events emitted before this field existed.
owner	object	✅	Ownership envelope identifying the company or organization that owns this event.
owner.ownershipType	"organization" (literal)	✅	Discriminator for the ownership envelope; always organization for these events.
owner.organizationUid	string	✅	UID of the organization that owns the event.
owner.parentCompanyUid	string	✅	UID of the owning organization's parent company.
alertUid	string	✅	Unique identifier for each alert across system
deviceIdentityHash	string	✅	Server-generated unique identifier of the device, used as the public-facing identifier in the REST API.
type	"Alert.AlertDeviceUnassigned" (literal)	✅	Fully-qualified event type discriminator (e.g. Device.DeviceConnectionAdded).
originator	object	—	Actor that initiated the action behind this event. Omitted for system-triggered events.
originator.accountId	number	—	Numeric identifier of the account that initiated the action.
originator.organizationUid	string	—	Organization on whose behalf the action was initiated.
originator.policyUid	string	—	Policy under which the action was initiated, if applicable.

Example

{
  "id": "string",
  "kind": "domain",
  "type": "Alert.AlertDeviceUnassigned",
  "payload": {
    "alertRuleUid": "e3da9a6exxxxxxxxxxxxxxxx39c8b7c7",
    "owner": {
      "ownershipType": "organization",
      "organizationUid": "a6d4562exxxxxxxxxxxxxxxxdb573e11",
      "parentCompanyUid": "bab2d740xxxxxxxxxxxxxxxx7f802ac4"
    },
    "alertUid": "df61ac8fxxxxxxxxxxxxxxxxb4d46b16",
    "deviceIdentityHash": "ea619962xxxxxxxxxxxxxxxx505221fe",
    "type": "Alert.AlertDeviceUnassigned",
    "originator": {
      "accountId": 6009,
      "organizationUid": "576aba46xxxxxxxxxxxxxxxx872144df",
      "policyUid": "0b2f00b7xxxxxxxxxxxxxxxx51c362b4"
    }
  }
}

Shape

{
  "id": "string",
  "kind": "domain",
  "type": "Alert.AlertDeviceUnassigned",
  "payload": {
    "alertRuleUid": "string | null",
    "owner": {
      "ownershipType": "organization",
      "organizationUid": "string",
      "parentCompanyUid": "string"
    },
    "alertUid": "string",
    "deviceIdentityHash": "string",
    "type": "Alert.AlertDeviceUnassigned",
    "originator?": {
      "accountId?": "number",
      "organizationUid?": "string",
      "policyUid?": "string"
    }
  }
}