List Devices Alerts Relations

Get details of devices with their related alerts from the database. The data returned by this action for each device corresponds to the Alerts table in the single device page.

External Documentation

To learn more, visit the Claroty xDome documentation.

Parameters

Parameter	Description
Fields	Specify which fields to return for each item.

Example Output

{
  "devices_alerts": [
    {
      "device_uid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
      "device_ip_list": [
        "xx.xxx.xx.xx"
      ],
      "device_mac_list": [
        "xx:xx:xx:xx:xx:xx"
      ],
      "device_network_list": [
        "xxxxxxxxx"
      ],
      "device_category": "xxxxxx",
      "device_subcategory": "xxxxxxxxxxxxx",
      "device_type": "xxxxxxxxxxxxx",
      "device_risk_score": "xxxxxxxxx",
      "device_retired": xxxx,
      "device_purdue_level": "xxxx",
      "device_site_name": "xxxxxxxxxxxxxxxxxxxxxxx",
      "device_labels": [],
      "device_assignees": [
        "xxxxx"
      ],
      "alert_id": x,
      "alert_type_name": "xxxxxxxxxxxxxxx",
      "alert_category": "xxxx",
      "alert_class": "xxxxxxxxxxx",
      "alert_labels": [
        "xxxxxxxxxxxxxxx"
      ],
      "alert_assignees": [],
      "device_first_seen_list": [
        "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
      ],
      "device_last_seen_list": [
        "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
      ],
      "device_alert_detected_time": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
      "device_alert_updated_time": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
      "device_alert_status": "xxxxxxxxxxxxxx"
    }
  ]
}

Workflow Library Example

List Devices Alerts Relations with Claroty Xdome and Send Results Via Email

Preview this Workflow on desktop