{
"_id": "<string>",
"teamId": "<string>",
"assetId": "<string>",
"assetType": "mailbox",
"assetLabel": "<string>",
"openedAt": "2023-11-07T05:31:56Z",
"recommendations": [
{
"explanationCode": "<string>",
"explanationVars": [
"<string>"
],
"contributingSignals": [],
"executedAt": "2023-11-07T05:31:56Z",
"executionDetail": "<string>",
"previousEmailsLimit": 123
}
],
"lastDiagnosisKey": "<string>"
}Objects & Definitions
Self-recovery case
A self-recovery incident case, opened when a monitored asset degrades. The history is append-only: one case per trigger.
status is recommended when nothing ran (no authorized and wired action for the diagnosis) or executed when at least one recommendation was applied. Each entry in recommendations carries its own executionStatus (executed, skippedNotAuthorized, notExecutable, or failed), so a single case can mix executed and recommendation-only fixes.A self-recovery incident case, opened when a monitored asset degrades. Append-only: one entry per trigger.
Case identifier (prefixed with srh_).
ID of the team that owns the case.
ID of the affected asset (a mailbox, prefixed with usm_).
Type of the affected asset.
Available options:
mailbox Human-readable label for the asset (usually the mailbox email).
When the case was opened.
recommended when nothing ran (no authorized + wired action); executed when at least one recommendation was applied.
Available options:
recommended, executed Ordered list of recommended fixes (primary first).
Show child attributes
Show child attributes
Internal key used to dedup identical diagnoses across ticks.
Was this page helpful?