--- title: "List snapshot statistics" method: GET path: "/uda/v1/stats/{workload}/resources/{resourceID}" tags: ["Data Anomalies"] --- # List snapshot statistics `GET /uda/v1/stats/{workload}/resources/{resourceID}` ## Request - Base URL: `https://apis.druva.com/realize` - URL: `https://apis.druva.com/realize/uda/v1/stats/{workload}/resources/{resourceID}` - Auth: API key in header `Authorization` Returns the snapshot statistics for a resource for which the Data Anomalies alert is generated. It displays the statistics for the last 30 days. ## Path parameters - `workload` 'fileserver' | 'nas' | 'endpoints' | 'sharepoint' | 'onedrive' | 'vmware' | 'azurevm' | 'ec2' | 'ebsvolume', required - `resourceID` integer, required ## Query parameters - `pageToken` integer ## Response `200` OK - ListResourceCverStats - `orgID` integer: The unique identifier of the Phoenix organization for the resource. Example - 101. Not applicable for Endpoints. - `resourceID` integer: The unique identifier of the resource, a device or a backup set on which Data Anomalies is detected. - `resourceName` string: Name of the resource on which Data Anomalies are detected. Example - Ernie Carter's Macbook. - `resourceParentName` string: Name of the device user in case of a device or Server Name in case of a backup set which is quarantined. Example - Ernie Carter - `resourcePlatform` string: The operating system of the resource. Example - linux. Not applicable ("NA") for FS/NAS. - `workload` 'endpoints' | 'fileserver' | 'nas' | 'vmware' | 'sharepoint' | 'onedrive' | 'azurevm' | 'ec2' | 'ebsvolume' - `resourceType` 'Endpoint' | 'File Server' | 'NAS' | 'VMware' | 'SharePoint' | 'OneDrive' | 'AzureVM' | 'EC2' | 'EBS Volume': The type of the resource. A resource can be one of the following types - - Endpoint - File Server - NAS - VMware - SharePoint - OneDrive - AzureVM - EC2 - EBS Volume. - `totalAlerts` integer: The total number of Data Anomalies alerts occurred in the last 30 days. - `activeAlerts` integer: The total number of Data Anomalies alerts on which no action has been taken for the past 30 days. - `siteType` string: Site type for Sharepoint sites. - `siteUrl` string: The URL of the SharePoint site. - `resourceUrl` string: The url that redirects to the product user interface (UI) of the resource. - `payload` object: Additional resource-specific information. Present for AzureVM, EC2, and EBS Volume workloads. - `subscription` string: Azure subscription name (AzureVM only). - `region` string: Region of the resource (AzureVM, EC2, EBS Volume). - `resourceGroup` string: Azure resource group name (AzureVM only). - `csetPolicyMap` object: This mapping associates integer cset IDs with their corresponding backup policy names (strings). It is specific to the EC2 and EBS Volume workloads. - `stats` object[] - `alertTime` string: The date and time on which the Data Anomalies alert was observed in the snapshot. Example - Nov 21 2019, 14:39' - `alertTimestamp` string: Date and time when the alert got generated in YYYY-MM-DD'T'hh:mm:ss'Z' format. - `snapshotTime` string: Date and time when the snapshot got created in YYYY-MM-DD'T'hh:mm:ss'Z' format. - `isLogAvailable` boolean: True, if activity logs are available for download. - `unscannedDetails` string: The reason for the Data Anomaly scan not being performed on the selected snapshot. - `isQuarantined` boolean: True, if the resource is quarantined; else, false. - `snapsphotStatus` integer: Provides details of the status of the snapshot - 0 for Unscanned, 1 for Scanned, and 2 for Impacted snapshots. - `alertTypes` string[] - `snapshotID` string: The unique ID of the snapshot. Example - Mjk4OC1GcmkgTm92IDIyIDExOjEzOjU5IDIwMTk= - `snapshotName` string: Name of the snapshot for which the Data Anomalies alert occurred. Snapshot name is the date and the time on which it was created. Example - Nov 21 2019, 14:39 - `snapshotSize` string: Snapshot size, in bytes, for which the Data Anomalies alert was generated. - `totalFiles` integer: The total number of live files in the snapshot. - `totalFilesImpacted` integer: The total number of files created, deleted or modified in the snapshot. - `alertMetadata` object - `created` object - `files` integer: Number of files created. - `baseline` integer: Baseline for creation for the selected snapshot. - `deviation` string: Percent deviation from baseline. The format is '+20%'. - `filePerChange` string: Percent deviation from baseline. The format is '+5%'. - `isAlert` boolean: True, if there is a creation alert generated for the selected snapshot. - `updated` object - `files` integer: Number of files updated. - `baseline` integer: Baseline for updation for the selected snapshot. - `deviation` string: Percent deviation from baseline. The format is '+20%'. - `filePerChange` string: Percent deviation from baseline. The format is '+5%'. - `isAlert` boolean: True, if there is a modification alert generated for the selected snapshot. - `deleted` object - `files` integer: Number of files deleted. - `baseline` integer: Baseline for deletion for the selected snapshot. - `deviation` string: Percent deviation from baseline. The format is '+20%'. - `filePerChange` string: Percent deviation from baseline. The format is '+5%'. - `isAlert` boolean: True, if there is a deletion alert generated for the selected snapshot. - `encrpted` object - `files` integer: The number of files encrypted. This field is displayed only when an encryption alert gets generated. - `baseline` integer - `deviation` string - `filePerChange` string - `isAlert` boolean: True, if there is an encryption alert generated for the selected snapshot. - `status` string: Status of the Data Anomalies alert. Displays as Active if the Data Anomalies are detected on a snapshot. Displays as Resolved if an action is taken on the Data Anomalies. - `actionTaken` string: TThe action that was taken on the Data Anomalies alert. Value can be one of the following - - Quarantined - Ignored - No Action - `csetID` integer: This snapshot includes the cset ID, but only for EC2 and EBS Volume workloads. - `nextPageToken` string: The token to access the next page of results. This parameter will be empty for the last page of results. - `isLast` boolean: An identifier to identify if the returned page is the last page of results. Value can be one of the following - True - Is last page of results. False - There are more results available. Use 'nextPageToken' value to get the next list of results. ## Other responses - `400`: Bad Request - `401`: The request either did not include an authentication token, or you have provided an expired authentication token. - `404`: The requested resource was not found. - `500`: Internal Server Error --- [API](https://skmtc.dev/druva/apis/cyber-resilience.md) - [All operations](https://skmtc.dev/druva/apis/cyber-resilience/llms.txt) - [OpenAPI document](https://skmtc.dev/druva/apis/cyber-resilience/revisions/b149d46c996a?raw)