Security Monitoring

Get entities related to a signal

Get the list of entities related to a security signal, captured at the signal's timestamp.

get/api/v2/security_monitoring/signals/{signal_id}/entities

Request

  • Base URL
    https://api.datadoghq.com
  • URL
    https://api.datadoghq.com/api/v2/security_monitoring/signals/{signal_id}/entities
  • Auth
    • API key in header DD-API-KEY and API key in header DD-APPLICATION-KEY
    • or OAuth 2
      Authorization code: /oauth2/v1/authorize
      Token URL: /oauth2/v1/token scopes: security_monitoring_signals_read

Path parameters

signal_idstring required

The ID of the signal.

Query parameters

limitinteger
Example:10

The maximum number of entities to return.

Response

OK

Example response

{
  "data": {
    "attributes": {
      "identities": [
        {
          "display_name": "Test User",
          "principal_id": "user@example.com"
        }
      ]
    },
    "id": "AAAAAWgN8Xwgr1vKDQAAAABBV2dOOFh3ZzZobm1mWXJFYTR0OA",
    "type": "entities"
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.