Threat Investigation Automation APIs return JSON response objects in the following format:
{
"Data": {
"Code": 0,
"Message": "OK",
"Data": {
"taskId": "3d189747-08cf-439e-abc8-966df4e572c4,
f429b4b6-058a-4d76-8bbe-b8ef2b1cba68",
"lastContentId": "",
"hasMore": false,
"serverGuid": "E7DB4DA69FD9-4F4588CC-DFCF-CA7B-9227,
EEF8F4D610C0-41FEA6A6-8394-A44D-8FD1",
"serverName": "andy-osce-ies,andy-ies2",
"content": [
{
"statusCode": 0,
"message": "TMSL_S_SUCCESS",
"content": ""
}
]
},
"HasDataSource": false,
"TimeZone": 8
},
"Meta": {
"result": 1,
"errorCode": 0,
"errorMessgae": "Success"
},
"PermissionCtrl": {
"permission": "255",
"elements": null
}
}
Where the "Data" object contains the following information:
|
Name |
Type |
Description |
|---|---|---|
|
Response Objects for All Requests |
||
|
Data.Code |
Integer |
The result code of the response For possible values, see Threat Investigation Automation API Result Codes. |
|
Data.CodeType |
Integer |
Indicates the product that sent the response For Endpoint Sensor, the value is always 1. |
|
Data.Message |
String |
The description of the result code |
|
Data.taskId |
String |
The task ID of the response |
|
Data.hasMore |
Boolean |
Indicates if additional data can be retrieved from the server |
|
Data.serverGuid |
String |
The GUID of the responding servers |
|
Data.serverName |
String |
The server names of the responding servers |
|
Data.Data.content[0].statusCode |
Integer |
The status code of the response For possible values, see Threat Investigation Automation API Status Codes. |
|
Data.Data.content[0].message |
String |
The message of the response |
|
Data.Data.content[0].content |
Object |
The payload of the response |
|
Data.HasDataSource |
Boolean |
Indicates if data is retrieved from multiple Endpoint Sensor servers |
|
Data.TimeZone |
Integer |
The Coordinated Universal Time (UTC) offset |
|
Data.lastContentId |
String |
Contains information about the dataset’s location, and enables the ShowContent API to request the next chunks of data |
|
Data.lastContentId schema |
||
|
serverGuid |
String |
The server GUID |
|
lastContentId |
Integer |
ID used to retrieve the next set of results |
|
hasMore |
Boolean |
Indicates whether the source has more results |
|
totalProgress |
Integer |
Number of agents in the server Only used for querying the progress of the "CreateQuickScan" API. If not called by the "CreateQuickScan" API, the value is 0. |
|
currentProgress |
Integer |
Number of investigated agents in the server Only used for querying the progress of the "CreateQuickScan" API. If not called by the "CreateQuickScan" API, the value is 0. |
|
Response Objects for Unsuccessful Requests |
||
|
Data.ErrorServerName |
String |
Host name of the server which responded with the error |
|
Data.ErrorServers |
Object |
Container for error information |
|
Data.ErrorServers[i].httpCode |
Integer |
The HTTP status code of the error |
|
Data.ErrorServers[i].statusCode |
Integer |
The status code of the error |
|
Data.ErrorServers[i].serverName |
String |
The host name of the server that encountered the error |
|
Data.ErrorServers[i].message |
String |
The error message of the response |
|
Data.ErrorServers[i].content |
Object |
The payload of the error response |
|
Data.ErrorServers[i].codeType |
Integer |
Indicates the product/service that encountered the error
|
|
Custom Intelligence Automation API Response Objects |
||
|
Meta |
Object |
Indicates the response status, including the result, error code, and error message |
|
Result |
Integer |
The result code of the response For available values, see Custom Intelligence Automation API Response Codes. |
|
ErrorCode |
Integer |
The error code of the response For available values, see Custom Intelligence Automation API Response Codes. |
|
ErrorMsg |
String |
The error message of the response For available descriptions, see Custom Intelligence Automation API Response Codes. |
|
PermissionCtrl |
Object |
Indicates the permissions assigned to the logged-on user account for accessing Apex Central menu items and features |
|
permission |
Integer |
|
|
elements |
String |
The value is always "null" for Custom Intelligence Automation APIs |
