To learn more, visit the Claroty xDome documentation.

​
Parameters​

ParameterDescription
FieldSpecify the field by which to search for device-alert relations.
FieldsSpecify which fields to return for each item.
ValueSpecify the search value. It can be either a single value or multiple values separated by commas.

​
Example Output​

{  "devices_alerts": [    {      "device_uid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",      "device_ip_list": [        "xx.xxx.xx.xx"      ],      "device_mac_list": [        "xx:xx:xx:xx:xx:xx"      ],      "device_network_list": [        "xxxxxxxxx"      ],      "device_category": "xxxxxx",      "device_subcategory": "xxxxxxxxxxxxx",      "device_type": "xxxxxxxxxxxxx",      "device_risk_score": "xxxxxxxxx",      "device_retired": xxxx,      "device_purdue_level": "xxxx",      "device_site_name": "xxxxxxxxxxxxxxxxxxxxxxx",      "device_labels": [],      "device_assignees": [        "xxxxx"      ],      "alert_id": x,      "alert_type_name": "xxxxxxxxxxxxxxx",      "alert_category": "xxxx",      "alert_class": "xxxxxxxxxxx",      "alert_labels": [        "xxxxxxxxxxxxxxx"      ],      "alert_assignees": [],      "device_first_seen_list": [        "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"      ],      "device_last_seen_list": [        "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"      ],      "device_alert_detected_time": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx",      "device_alert_updated_time": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx",      "device_alert_status": "xxxxxxxxxxxxxx"    }  ]}

​
Workflow Library Example​

Get Device Alert Relations with Claroty Xdome and Send Results Via Email

Preview this Workflow on desktop

Was this page helpful?

Get Device Affected By An AlertGet Device Vulnerability Relations