Get event by given ID.

​
Parameters

ParameterDescription
Event IDThe ID of the event.

​
Example Output

{
	"uuid": "39a6918f-33f2-ec9b-0fcc-42bb90f10a1f",
	"account_name": "generic-account",
	"plugin_device_type": "Cloud Infrastructure",
	"destination_canonical": "s3.amazonaws.com",
	"destination_name": "s3.amazonaws.com",
	"has_alarm": false,
	"request_user_agent": "s3.amazonaws.com",
	"packet_type": "log",
	"source_canonical": "s3.amazonaws.com",
	"event_name": "PutObject",
	"timestamp_occured": "1528817037000",
	"source_service_name": "s3.amazonaws.com",
	"event_type": "AwsApiCall",
	"app_name": "amazon-aws",
	"timestamp_received": "1528817107938",
	"destination_hostname": "s3.amazonaws.com",
	"source_infrastructure_name": "Amazon Global",
	"plugin": "Amazon AWS CloudTrail",
	"app_type": "amazon-aws",
	"authentication_type": "AWSService",
	"access_control_outcome": "Allow",
	"suppressed": "false",
	"plugin_device": "CloudTrail",
	"destination_infrastructure_type": "Cloud Service",
	"source_infrastructure_type": "Cloud Service",
	"destination_zone": "us-east-1",
	"needs_enrichment": true,
	"source_hostname": "s3.amazonaws.com",
	"app_id": "amazon-aws",
	"plugin_family": "Amazon",
	"plugin_version": "0.24",
	"destination_userid": "101720206348",
	"event_action": "Create",
	"destination_infrastructure_name": "Amazon Global",
	"source_name": "s3.amazonaws.com",
	"received_from": "s3.amazonaws.com",
	"event_description": "Action for uploading an object (PUT or POST).",
	"_links": {
		"self": {
			"href": "https://mysubdomain.aveng.us/api/2.0/events/39a6918f-33f2-ec9b-0fcc-42bb90f10a1f",
			"templated": false
		}
	}
}

​
Workflow Library Example

Get Event with Alienvault Usm and Send Results Via Email

Preview this Workflow on desktop

Was this page helpful?