User Problem

At some point we need to do a cleanup/mass closure of alerts in our instance, where the number of alerts is in the 1000s. This can occur because of a runaway monitor that didn't de-duplicate, or through teams not following best practices and never closing their alerts so an admin needs to step in and help.

The current UI allows you to search for these alerts, but then displays them in lots of 20 and you need to continually scroll down to include more alerts into the list - Only then can you use the Bulk actions button to select all and mass close them.

Additionally - there is no method to do this in bulk via the API. We currently have to use listAlerts and interpret the results to generate a set of close requests and submit each one individually (to avoid rate limiting).

Suggested Solutions

We would like to be able to search for alerts via a query and then choose to do Bulk Actions on All results, rather than just the 20 or so initially returned (and any subsequent added by our manually scrolling).
As this is a powerful function, it might be sensible to limit the access to this functionality in the UI - It should only be available to users with a Bulk Action permissions in their role (such as Admin users).

There should exist a BulkClose REST API endpoint, which would allows us to specify a search query as the parameter to the REST endpoint, which would then close those records in bulk.

Current Workarounds

None available - the selecting of records via the UI and scrolling down is the most direct method for selecting and closing in bulk.