Return the security SCA database of an agent.
External DocumentationTo learn more, visit the Wazuh Server documentation.

​
Basic Parameters

ParameterDescription
Agent IDThe agent ID.
DistinctSelect to look for distinct values.
FieldsA comma-separated list, without any whitespace before or after the commas, of fields to return.

Note: Use ’.’ for nested fields, for example: field1 , field2.nestedField1, field3
LimitMaximum number of elements to return.
NameFilter by policy name.
OffsetThe offset of the first element to return.
PrettySelect to show results in human-readable format.
QueryA query to filter the results by.

For example: status=active
Return All PagesAutomatically fetch all resources, page by page.
Search TextA string used to filter elements containing the specified text.

Note: To obtain a complementary search, use - at the beginning.
SortA comma-separated list, without any whitespace before or after the commas, of fields to sort by. Use +/- at the beginning to list in ascending or descending order. Use . for nested fields.
Wait For CompleteSelect to disable timeout response.

​
Advanced Parameters

ParameterDescription
DescriptionFilter by policy description.
ReferencesFilter by references.

​
Example Output

{
	"data": {
		"affected_items": [
			{
				"description": "This document provides prescriptive guidance for establishing a secure configuration posture for Ubuntu Linux 20.04 LTS.",
				"fail": 87,
				"start_scan": "2022-09-27T08:07:02+00:00",
				"references": "https://www.cisecurity.org/cis-benchmarks/",
				"name": "CIS benchmark for Ubuntu Linux 20.04 LTS",
				"pass": 56,
				"score": 39,
				"end_scan": "2022-09-27T08:07:02+00:00",
				"policy_id": "cis_ubuntu20-04",
				"total_checks": 191,
				"hash_file": "fb41fe9660f4320aaed0c3c292c8602953df7f8c42b37b724855f9005c43fafc",
				"invalid": 48
			}
		],
		"total_affected_items": 1,
		"total_failed_items": 0,
		"failed_items": []
	},
	"message": "All selected SCA information was returned",
	"error": 0
}

​
Workflow Library Example

Get Sca Results with Wazuh Server and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop