How to use a Splunk API to retrieve results of a triggered alert?

[worldexplorer81]

Hi, 

I have set up an alert and under Actions, I have added 'Add to triggered Alerts'. 

I would like to be able to use an API to retrieve the actual results of a specific triggered alert (Example, get the results of the alert triggered at 17.43. 

I am using alerts/fired_alerts/<alert_name> but it just gives me the list of trigger history. 

Is it possible to be able to retrieve the actual results? Preferably in JSON

[richgalloway · Accepted solution]

The fired_alerts response will include a search ID (sid), which you then can use in the  search/jobs/{search_id}/results API call to get the search results.