Skip to main content
This guide walks you through pushing external alerts into Corsa and escalating them to investigation cases for your compliance team. Full API reference is available in the API Reference.
Before ingesting alerts, make sure the related clients and operations have already been ingested. See the Ingesting Clients and Ingesting Operations guides.

​
Step 1: Ingest Alerts

Push external alerts (from third-party vendors or internal systems) into Corsa for centralized monitoring and case management. Endpoint: POST /v1/alerts 
POST /v1/alerts
Content-Type: application/json

{
  "referenceId": "EXT-ALERT-555",
  "category": "TRANSACTION_MONITORING",
  "priority": "HIGH",
  "status": "NEW",
  "description": "Large withdrawal detected for a high-risk account.",
  "raisedAt": "2024-01-17T09:00:00Z",
  "source": {
    "vendor": "OTHER",
    "vendorAlertId": "INT-SYS-99",
    "alertSource": "API"
  },
  "associatedClients": [
    "123e4567-e89b-12d3-a456-426614174000"
  ],
  "assigneeId": "user-uuid-of-analyst"
}
The assigneeId field is optional. If not provided, the alert will be created without an assignee.
The associatedClients array should contain the Corsa client id(s) returned when you ingested the client.

​
Step 2: Escalate an Alert to a Case

When an alert requires further investigation or formal review, escalate it to a Case. This links the alert to a new case, allowing investigators to track the entire lifecycle from detection to resolution. Endpoint: POST /v1/cases 
POST /v1/cases
Content-Type: application/json

{
  "referenceId": "CASE-2024-001",
  "priority": "HIGH",
  "category": "TRANSACTION_MONITORING",
  "subCategory": "Suspicious Activity",
  "status": "UNDER_INVESTIGATION",
  "description": "Investigation opened for high-value transaction pattern.",
  "alertsIds": [
    "alert-uuid-from-previous-step"
  ],
  "transactionsIds": [
    "transaction-uuid-related-to-alert"
  ],
  "clientsIds": [
    "client-uuid-related-to-alert"
  ],
  "assigneeId": "analyst-uuid",
  "reviewersIds": [],
  "dueDate": "2024-01-25T17:00:00Z"
}
The reviewersIds field is required but can be an empty array. The case status will be automatically set to NEW upon creation, regardless of what you specify in the request.
This links the alert to the new case, allowing investigators to track the entire lifecycle from detection (Alert) to resolution (Case).

​
What’s Next?

Manage Alerts & Cases

Batch create, bulk assign, update, and escalate alerts and cases.

Manage Attachments

Upload and link files to alerts, cases, and other entities.

Rules & Evaluation

Set up transaction monitoring rules.