Search deviances by checker

post

https://{customer}.tenable.ad/api/profiles/{profileId}/checkers/{checkerId}/deviances

Returns the deviances that the specified checker found in the specified security profile, filtered by an optional query expression.

Requires the ioe license type. See License Types.

Requires the Read permission on the Profiles, Forests, Domains, and Indicators of Exposure entities (read:profile, read:infrastructure, read:directory, read:checker). See Identity Exposure Permissions.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Path Params

profileId

string

required

^[0-9]+$

Specifies the ID of the security profile.

checkerId

string

required

^[0-9]+$

Specifies the ID of the checker.

Query Params

perPage

string

^[0-9]+$

Specifies the maximum number of deviances to return per page.

page

string

^[0-9]+$

Specifies the page of results to return. The first page is 1.

batchSize

string

^[0-9]+$

Specifies the number of deviances to return when paging with lastIdentifierSeen. When set, it takes precedence over perPage and page, and the perPage maximum does not apply.

lastIdentifierSeen

string

^[0-9]+$

Specifies the ID of the last deviance on the previous page of results, to return the next page. The _links.next URL in a paginated response already includes this value.

Body Params

Validates the POST /checker/:checkerId/deviances request

expression

object

required

Specifies the query expression that filters the deviances. An expression is an AND or OR operator that holds a list of conditions, each pairing an attribute name with a value, such as {"AND": [{"cn": "admin"}]}. A single condition can also stand alone. A condition matches attribute values that contain the specified text, regardless of case, and an unrecognized operator matches nothing. An empty object applies no filter.

Responses

401

Returned if the API key specified in your request is invalid.

500

Returned if an internal error occurred.

Language

Credentials

Header

URL

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

200Returned if the search results were retrieved successfully.