To learn more, visit the AlienVault USM documentation.

​
Parameters​

ParameterDescription
Alarm IDThe ID of the alarm.

​
Example Output​

{    "uuid": "971918fd-a569-548a-5a80-1ffcda2a8365",    "has_alarm": false,    "needs_enrichment": true,    "priority": 20,    "suppressed": false,    "events": [        {            "uuid": "...more content omitted for clarity..."        }    ],    "rule_intent": "Environmental Awareness",    "app_type": "amazon-aws",    "source_username": "user@alienvault.com",    "security_group_id": "sg-xxxxx",    "destination_name": "ec2.amazonaws.com",    "timestamp_occured": "1517932134000",    "authentication_type": "IAMUser",    "event_type": "Alarm",    "rule_method": "AWS EC2 Security Group Modified",    "priority_label": "low",    "app_id": "amazon-aws",    "source_name": "x.xx.xx.xxxx",    "timestamp_received": "1517933139670",    "rule_strategy": "Network Access Control Modification",    "request_user_agent": "signin.amazonaws.com",    "rule_id": "AWSEC2SecurityGroupMod",    "sensor_uuid": "433152d2-10ee-4645-8c04-9f8269a447e7",    "transient": false,    "event_name": "Add inbound network traffic rule to security group",    "packet_type": "alarm",    "status": "open",    "_links": {        "self": {            "href": "https://mysubdomain.aveng.us/api/2.0/alarms/971918fd-a569-548a-5a80-1ffcda2a8365",            "templated": false        }    }}

​
Workflow Library Example​

Get Alarm with Alienvault Usm and Send Results Via Email

Preview this Workflow on desktop

Was this page helpful?

AlienVault USM Custom ActionGet Event