Get Device Alert Relations
Get details of specific device(s) with the related alerts from the database. The data returned by this action for each device corresponds to the Alerts table in the single device page.
External Documentation
To learn more, visit the Medigate documentation.
Parameters
Parameter | Description |
---|---|
Field | Specify the field by which to search for device-alert relations. |
Fields | Specify which fields to return for each item. |
Value | Specify the search value. It can be either a single value or multiple values separated by commas. |
Example Output
{
"devices_alerts": [
{
"device_uid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"device_ip_list": [
"xx.xxx.xx.xx"
],
"device_mac_list": [
"xx:xx:xx:xx:xx:xx"
],
"device_network_list": [
"xxxxxxxxx"
],
"device_category": "xxxxxx",
"device_subcategory": "xxxxxxxxxxxxx",
"device_type": "xxxxxxxxxxxxx",
"device_risk_score": "xxxxxxxxx",
"device_retired": xxxx,
"device_purdue_level": "xxxx",
"device_site_name": "xxxxxxxxxxxxxxxxxxxxxxx",
"device_labels": [],
"device_assignees": [
"xxxxx"
],
"alert_id": x,
"alert_type_name": "xxxxxxxxxxxxxxx",
"alert_category": "xxxx",
"alert_class": "xxxxxxxxxxx",
"alert_labels": [
"xxxxxxxxxxxxxxx"
],
"alert_assignees": [],
"device_first_seen_list": [
"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
],
"device_last_seen_list": [
"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
],
"device_alert_detected_time": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"device_alert_updated_time": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"device_alert_status": "xxxxxxxxxxxxxx"
}
]
}
Workflow Library Example
Get Device Alert Relations with Medigate and Send Results Via Email