Parameter | Description |
---|---|
Attribute | Attributes of the object. Example: [ { "category": "Internal reference", "value": "127.0.0.1", "to_ids": true, "disable_correlation": false, "distribution": "0", "comment": "logged source ip", "object_relation": "sensor" } ] |
Event ID | UUID or numeric ID of the event. Can be obtained by using the List Events action. |
Object Template ID | UUID Or numeric ID of the object template. |
{
"Object": {
"id": "<string>",
"name": "<string>",
"meta-category": "<string>",
"description": "<string>",
"template_uuid": "<string>",
"template_version": "<string>",
"event_id": "<string>",
"uuid": "<string>",
"timestamp": "1744896602",
"distribution": "<string>",
"sharing_group_id": "<string>",
"comment": "<string>",
"deleted": false,
"first_seen": null,
"last_seen": null,
"Attribute": [
{
"id": "<string>",
"event_id": "<string>",
"object_id": "<string>",
"object_relation": "<string>",
"category": "<string>",
"type": "<string>",
"value1": "<string>",
"value2": "<string>",
"to_ids": true,
"uuid": "<string>",
"timestamp": "<string>",
"distribution": "<string>",
"sharing_group_id": "<string>",
"comment": "<string>",
"deleted": false,
"disable_correlation": false,
"first_seen": null,
"last_seen": null,
"value": "<string>"
},
{
"id": "<string>",
"event_id": "<string>",
"object_id": "<string>",
"object_relation": "<string>",
"category": "<string>",
"type": "<string>",
"value1": "<string>",
"value2": "<string>",
"to_ids": true,
"uuid": "<string>",
"timestamp": "1744896602",
"distribution": "<string>",
"sharing_group_id": "<string>",
"comment": "<string>",
"deleted": false,
"disable_correlation": false,
"first_seen": null,
"last_seen": null,
"value": "<string>"
}
]
}
}
Was this page helpful?