Threat Investigation Automation APIs return JSON response objects in the following format:
{ "Data": { "Code": 0, "Message": "OK", "Data": { "taskId": "3d189747-08cf-439e-abc8-966df4e572c4, f429b4b6-058a-4d76-8bbe-b8ef2b1cba68", "lastContentId": "", "hasMore": false, "serverGuid": "E7DB4DA69FD9-4F4588CC-DFCF-CA7B-9227, EEF8F4D610C0-41FEA6A6-8394-A44D-8FD1", "serverName": "andy-osce-ies,andy-ies2", "content": [ { "statusCode": 0, "message": "TMSL_S_SUCCESS", "content": "" } ] }, "HasDataSource": false, "TimeZone": 8 }, "Meta": { "result": 1, "errorCode": 0, "errorMessgae": "Success" }, "PermissionCtrl": { "permission": "255", "elements": null } }
Where the "Data" object contains the following information:
Name |
Type |
Description |
---|---|---|
Response Objects for All Requests |
||
Data.Code |
Integer |
The result code of the response For possible values, see Threat Investigation Automation API Result Codes. |
Data.CodeType |
Integer |
Indicates the product that sent the response For Endpoint Sensor, the value is always 1. |
Data.Message |
String |
The description of the result code |
Data.taskId |
String |
The task ID of the response |
Data.hasMore |
Boolean |
Indicates if additional data can be retrieved from the server |
Data.serverGuid |
String |
The GUID of the responding servers |
Data.serverName |
String |
The server names of the responding servers |
Data.Data.content[0].statusCode |
Integer |
The status code of the response For possible values, see Threat Investigation Automation API Status Codes. |
Data.Data.content[0].message |
String |
The message of the response |
Data.Data.content[0].content |
Object |
The payload of the response |
Data.HasDataSource |
Boolean |
Indicates if data is retrieved from multiple Endpoint Sensor servers |
Data.TimeZone |
Integer |
The Coordinated Universal Time (UTC) offset |
Data.lastContentId |
String |
Contains information about the dataset’s location, and enables the ShowContent API to request the next chunks of data |
Data.lastContentId schema |
||
serverGuid |
String |
The server GUID |
lastContentId |
Integer |
ID used to retrieve the next set of results |
hasMore |
Boolean |
Indicates whether the source has more results |
totalProgress |
Integer |
Number of agents in the server Only used for querying the progress of the "CreateQuickScan" API. If not called by the "CreateQuickScan" API, the value is 0. |
currentProgress |
Integer |
Number of investigated agents in the server Only used for querying the progress of the "CreateQuickScan" API. If not called by the "CreateQuickScan" API, the value is 0. |
Response Objects for Unsuccessful Requests |
||
Data.ErrorServerName |
String |
Host name of the server which responded with the error |
Data.ErrorServers |
Object |
Container for error information |
Data.ErrorServers[i].httpCode |
Integer |
The HTTP status code of the error |
Data.ErrorServers[i].statusCode |
Integer |
The status code of the error |
Data.ErrorServers[i].serverName |
String |
The host name of the server that encountered the error |
Data.ErrorServers[i].message |
String |
The error message of the response |
Data.ErrorServers[i].content |
Object |
The payload of the error response |
Data.ErrorServers[i].codeType |
Integer |
Indicates the product/service that encountered the error
|
Custom Intelligence Automation API Response Objects |
||
Meta |
Object |
Indicates the response status, including the result, error code, and error message |
Result |
Integer |
The result code of the response For available values, see Custom Intelligence Automation API Response Codes. |
ErrorCode |
Integer |
The error code of the response For available values, see Custom Intelligence Automation API Response Codes. |
ErrorMsg |
String |
The error message of the response For available descriptions, see Custom Intelligence Automation API Response Codes. |
PermissionCtrl |
Object |
Indicates the permissions assigned to the logged-on user account for accessing Apex Central menu items and features |
permission |
Integer |
|
elements |
String |
The value is always "null" for Custom Intelligence Automation APIs |