ONoneuptime
Security Event

Get Security Event

Endpoint to retrieve a single Security Event by ID

post/security-events/{id}/get-item

Request

Path parameters

idstring uuid required

ID of the Security Event to retrieve

Request body

Example request

{
  "select": {
    "projectId": true,
    "primaryEntityId": true,
    "primaryEntityType": true
  }
}

Response

Successful response

Example response

{
  "data": {
    "projectId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
    "primaryEntityId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
    "primaryEntityType": "Example text value",
    "time": "example_value",
    "eventUid": "Example text value",
    "categoryUid": 42,
    "categoryName": "Example text value",
    "classUid": 42,
    "className": "Example text value",
    "activityName": "Example text value",
    "severityId": 42,
    "severityName": "Example text value",
    "statusName": "Example text value",
    "message": "Example text value",
    "vendorName": "Example text value",
    "productName": "Example text value",
    "ruleId": "Example text value",
    "ruleName": "Example text value",
    "mitreTactics": [
      "item1",
      "item2",
      "item3"
    ],
    "mitreTechniques": [
      "item1",
      "item2",
      "item3"
    ],
    "principalUser": "Example text value",
    "principalHost": "Example text value",
    "principalIp": "Example text value",
    "principalProcess": "Example text value",
    "processName": "Example text value",
    "processPath": "Example text value",
    "processCommandLine": "Example text value",
    "parentProcessName": "Example text value",
    "parentProcessPath": "Example text value",
    "parentProcessCommandLine": "Example text value",
    "targetUser": "Example text value",
    "targetHost": "Example text value",
    "targetIp": "Example text value",
    "targetPort": 42,
    "targetResource": "Example text value",
    "observables": [
      "item1",
      "item2",
      "item3"
    ],
    "traceId": "Example text value",
    "spanId": "Example text value",
    "sessionId": "Example text value",
    "requestOutcome": "Example text value",
    "attributes": "example_value",
    "attributeKeys": [
      "item1",
      "item2",
      "item3"
    ]
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.