Search deviances by event

post

https://{customer}.tenable.ad/api/profiles/{profileId}/infrastructures/{infrastructureId}/directories/{directoryId}/events/{eventId}/deviances

Returns the deviances associated with the specified event in the specified security profile and directory.

Requires the ioe license type. See License Types.

Requires the Read permission on the Profiles, Forests, Domains, and Indicators of Exposure entities (read:profile, read:infrastructure, read:directory, read:checker). See Identity Exposure Permissions.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Path Params

profileId

string

required

^[0-9]+$

Specifies the ID of the security profile.

infrastructureId

string

required

^[0-9]+$

Specifies the ID of the infrastructure (forest).

directoryId

string

required

^[0-9]+$

Specifies the ID of the directory (domain).

eventId

string

required

^[0-9]+$

Specifies the ID of the event.

Query Params

perPage

string

^[0-9]+$

Specifies the maximum number of deviances to return per page.

page

string

^[0-9]+$

Specifies the page of results to return. The first page is 1.

Body Params

Validates POST /profiles/:profileId/infrastructures/:infrastructureId/directories/:directoryId/events/:eventId/deviances request payload

checkers

array of integers

required

Filters results to deviances from the specified checkers.

checkers*

reasons

array of integers

required

Filters results to deviances for the specified reasons.

reasons*

Responses

401

Returned if the API key specified in your request is invalid.

500

Returned if an internal error occurred.

Language

Credentials

Header

URL

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

200Returned if the search results were retrieved successfully.