# Find and/or aggregate detection alerts

**POST /api/detection_engine/signals/search**

Find and/or aggregate detection alerts that match the given query.


## Servers
- http://localhost:5601: http://localhost:5601 ()


## Authentication methods
- Basic auth


## Parameters



### Body: application/json (object)
Search and/or aggregation query
- **_source** (boolean | string | array[string])

- **aggs** (object)

- **fields** (array[string])

- **query** (object)

- **runtime_mappings** (object)

- **size** (integer)

- **sort** (string | object | array[string | object])

- **track_total_hits** (boolean)



## Responses
### 200
Successful response

#### Body: application/json (object)
object
### 400
Invalid input data response

#### Body: application/json (object)
- **error** (string)

- **message** (string)

- **statusCode** (integer)


### 401
Unsuccessful authentication response

#### Body: application/json (object)
- **error** (string)

- **message** (string)

- **statusCode** (integer)


### 500
Internal server error response

#### Body: application/json (object)
- **message** (string)

- **status_code** (integer)



[Powered by Bump.sh](https://bump.sh)