Skip to main content
McAfee Enterprise MVISION Cloud

Query Incident Information Keys API

The Query Incident Information Keys API retrieves list of Incident.information keys to access values from the Incident.information map.

  URL example --
  https://www.myshn.net/shnapi/rest/external/api/v1/queryIncidentInformationKeys

Responses

Code Description
default List of keys with descriptions for corresponding Incident types used to access values from the Incident Information map.

 

Schema

Name Description Type Example
IncidentInformationKeysByType The list of information keys available per incident type. The information keys consist of two fields, key ::= key to access value from information map, and value ::= description of the value that will be retrieved String Values :== [ AuditViolation (Alert.Audit...) | PolicyViolation (Alert.Policy.Dlp) | SanctionedAnomaly (Alert...) | ShadowAnomaly (Alert...) | Threat (Threat...) ]
informationKeys A pair of key and value (standard map entry). String  

 

  • Was this article helpful?