Перейти к содержанию

Поиск типов инцидентов

Запрос

Тип Метод
POST /findings/search

Описание: При выполнении запроса будут возвращены найденные типы инцидента с учётом заданных фильтров.

По умолчанию в объекты не загружаются связанные модели по типам связи many2many и has-many, для включения загрузки их нужно указывать в поле relations объекта запроса.

Есть возможность расширить ответ информацией об идентификаторах связанных сущностей, возвращаемых в поле _relations, для этого необходимо и одноименном поле запроса передать список связанных моделей.

Поле _relations запроса расширяет поле relations для связей кроме один-к-одному, т.е. сущности указанные в последнем поле появятся в ответе в поле _relations в любом случае.

Пример запроса 

POST
http://127.0.0.1/cruddy/v2/findings/search

Тело запроса:

Параметр Тип данных Обязательность Описание
include_fields Array<string> Required Список полей для выборки.
Если модель содержит поля, не указанные в запросе, они будут отсутствовать в ответе
exclude_fields Array<string> Required Список полей для удаления из выборки.
Если модель содержит поля, указанные в запросе, они будут отсутствовать в ответе
filters Array<filters> Required Список фильтров по полям модели
ordering Array<ordering> Required Настройки сортировки
virtual_search object<virtual_search> Required Поле для поиска по подстроке по всем строковым полям модели и настройка строгого поиска
relations Array<string> Required Список связей для выборки. Список доступных связей отображается в ответе запроса на получение метаданных - “/_meta”
limit integer Required Лимит выдачи найденных объектов
offset integer Required Отступ от начала результата поиска в базе
_relations Array<string> Optional Перечисление связанных сущностей идентификаторы которых нужно вернуть в ответе в поле _relations
Array of filters
Параметр Тип данных Обязательность Описание
field string Required Название поля модели
value object Required Значение для фильтрации
filter_type string Required В зависимости от этого значения определяется допустимые значения в поле value. Допустимые значения:
- equal -> строка|число, проверяет равенство значений
- substr -> строка, проверяет вхождение подстроки
- intersection -> массив (тип элемента зависит от типа поля), проверяет вхождение значения поля в переданный массив
- range -> массив (тип элемента зависит от типа поля), проверяет вхождение значения поля в переданный диапазон
- related -> строка или массив строк (uuid), проверят связанность с моделью по идентификатору
если value: [], проверяет наличие или отсутствие связанных сущностей
- exists -> значение отсутствует, проверяется равенство колонки с null
negation boolean Optional Флаг использования отрицания при проверке фильтра
Array of ordering
Параметр Тип Обязательность Описание / Допустимые значения
field string Required Поле модели выбранное для сортировки
direction string Required Направление сортировки. Допустимые значения:
- asc
- desc
Параметр Тип Обязательность Описание / Допустимые значения
value string Required Значение выбранное для поиска
strict boolean Required Опция, включающая строгий поиск. Возможные значения:
- true - строгий поиск включена;
- false - строгий поиск выключен.
Пример тела запроса 

{
  "include_fields": [
    "string"
  ],
  "exclude_fields": [
    "string"
  ],
  "filters": [
    {
      "field": "string",
      "value": [
        "name",
        [
          "value1",
          "value2"
        ]
      ],
      "filter_type": "equal",
      "negation": false
    }
  ],
  "ordering": [
    {
      "field": "string",
      "direction": "asc"
    }
  ],
  "virtual_search": {
    "value": "string",
    "strict": false
  },
  "relations": [
    "service_asset_findings",
    "logmule_go_rules",
    "user"
  ],
  "limit": 20,
  "offset": 0,
  "_relations": [
    "string"
  ]
}

Успешный ответ

Статус код: 200 – успешный ответ.

Формат: JSON.

Параметры ответа:

Параметр Тип данных Описание
items Array <Finding> Список найденных типов инцидентов
total integer Количество найденных типов инцидентов
Пример ответа 

{
  "items": [
    {
      "title": "string",
      "description": "string",
      "risk_impact": "string",
      "solution": "string",
      "display_id": 0,
      "mitigation": "string",
      "synopsis": "string",
      "local": true,
      "type": "network_anomaly",
      "identifier": {},
      "comment": "string",
      "fallback_raw_risklevel": 10,
      "new_version": true,
      "client_note": "string",
      "internal_note": "string",
      "cpes": [
        "string"
      ],
      "category_id": "8de4c9fd-61a4-4c0b-bf88-0ed3a0fe3fa2",
      "customer_created": true,
      "software_compliance": true,
      "itsm_last_synced_at": "2023-12-20T00:00:01.652259Z",
      "updated_by": "deea00dc-b6b6-4412-a483-26ac61e1f6fe",
      "created_by_customer": "d299b51b-03f1-4b72-b793-1fb027d05389",
      "edited_by": "9501acb5-3be0-4719-a60e-dfa79624666c",
      "is_system": true,
      "category": {},
      "service_asset_findings": [
        {
          "description": "string",
          "risk_impact": "string",
          "solution": "string",
          "mitigation": "string",
          "status": "assigned_customer",
          "risklevel": 0,
          "service_asset_id": "09122f07-8b1e-48dc-96fd-379806f6c51e",
          "finding_id": "feebf65a-2eaa-4fae-aab2-772450efdffe",
          "analysis_output": "string",
          "synopsis": "string",
          "title": "string",
          "risk": "none",
          "acknowledged_at": "2023-12-20T00:00:01.652259Z",
          "alert_type": "automatic",
          "client_note": "string",
          "internal_note": "string",
          "external": false,
          "immediate_action_score": 0,
          "throughput_period": "grace",
          "throughput_period_change": "2023-12-20T00:00:01.652259Z",
          "customer_created": false,
          "c_visible_since": "2023-12-20T00:00:01.652259Z",
          "c_visible_since_in_days": 0,
          "c_reopened_count": 0,
          "c_last_customer_status_change": "2023-12-20T00:00:01.652259Z",
          "logmule_identifier": "string",
          "c_remote_exploitable": true,
          "c_occurrence_count": 0,
          "с_customer_retention_time": 0,
          "last_occurrence_id": "92c2542a-a9bb-4370-b835-20b1c9ac1fe9",
          "itsm_last_synced_at": "2023-12-20T00:00:01.652259Z",
          "itsm_sync_status": "scheduled",
          "external_id": "string",
          "itsm_sync_error": "string",
          "user_id": "a169451c-8525-4352-b8ca-070dd449a1a5",
          "updated_by": "deea00dc-b6b6-4412-a483-26ac61e1f6fe",
          "group_id": "306db4e0-7449-4501-b76f-075576fe2d8f",
          "acknowledged_by": "57e93f65-9db5-4b3c-8761-f3edd8ac8276",
          "created_by_customer": "d299b51b-03f1-4b72-b793-1fb027d05389",
          "edited_by": "9501acb5-3be0-4719-a60e-dfa79624666c",
          "incident_group_id": "5ce55b8d-2342-4286-bf58-bfe807f8c05c",
          "reopened_at": "2023-12-20T00:00:01.652259Z",
          "display_id": 0
        }
      ],
      "rules": [
        {
          "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
          "created_at": "2023-12-20T00:00:01.652259Z",
          "updated_at": "2023-12-20T00:00:01.652259Z",
          "name": "string",
          "frontend_data": {
            "alert": {
              "id": "uuid",
              "trace_id": "uuid",
              "name": "string",
              "create_incident": true,
              "assign_to_customer": true,
              "risk_level": 5.35,
              "asset_ip": "string",
              "asset_hostname": "string",
              "asset_fqdn": "string",
              "asset_mac": "string",
              "first_and_last_logs": false,
              "trim_logs": 1,
              "template": "string",
              "mitre": ""
            },
            "grouper": {
              "id": "uuid",
              "trace_id": "uuid",
              "name": "string",
              "grouped_by": [
                "string"
              ],
              "aggregated_by": [
                "string"
              ],
              "grouped_time_field": "string",
              "grouped_time_type": "2023-12-20T00:00:01.652259Z",
              "detection_windows": 5,
              "detection_windows_unit": "ms",
              "aggregate_count": 1,
              "aggregate_unique": true
            },
            "actions": [
              {
                "TTL": "string",
                "key": {
                  "_default": {
                    "type": "value",
                    "value": "string"
                  }
                },
                "type": "store-set",
                "store": "string",
                "value": "string",
                "column": "string"
              }
            ],
            "conditions": [
              {
                "type": "compare-condition",
                "id": "uuid",
                "parentId": null,
                "negation": false,
                "compareFn": "eq",
                "expressions": [
                  {
                    "type": "logline-get",
                    "value": "string"
                  }
                ]
              }
            ],
            "version": 2
          },
          "test_data": [
            {}
          ],
          "settings": {
            "function_metrics": false,
            "is_constructor": false,
            "max_alerts": 1,
            "max_alerts_per_second": 1,
            "max_rule_memory_mb": 1
          },
          "active": true,
          "reload": true,
          "finding_id": "uuid",
          "description": "string",
          "lua": "string",
          "is_retro": false,
          "is_system": true,
          "stats": {
            "result_count": 1,
            "error_count": 0
          },
          "is_error": 0,
          "running_at": "2023-12-20T00:00:01.652259Z",
          "logmule_go_filters": [
            {
              "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
              "name": "string",
              "config": [
                {
                  "compareFn": "equal",
                  "expressions": [
                    {
                      "type": "logline-get",
                      "value": {}
                    }
                  ],
                  "type": "compare-condition",
                  "parentId": "string",
                  "ignore_case": true,
                  "negation": true
                }
              ],
              "logmule_go_rules": null,
              "stats": {
                "hit_count": 0,
                "hit_eps": 0,
                "check_count": 0,
                "check_eps": 0,
                "check_time": 0
              },
              "_relations": {
                "logmule_go_rules": [
                  "497f6eca-6276-4993-bfeb-53cbbbba6f08"
                ]
              }
            }
          ],
          "logmule_go_modules": [
            {
              "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
              "created_at": "2023-12-20T00:00:01.652259Z",
              "updated_at": "2023-12-20T00:00:01.652259Z",
              "name": "string",
              "content": "string",
              "is_system": true,
              "logmule_go_rules": [
                {
                  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
                  "created_at": "2023-12-20T00:00:01.652259Z",
                  "updated_at": "2023-12-20T00:00:01.652259Z",
                  "name": "string",
                  "frontend_data": {
                    "alert": {
                      "id": "uuid",
                      "trace_id": "uuid",
                      "name": "string",
                      "create_incident": true,
                      "assign_to_customer": true,
                      "risk_level": 5.35,
                      "asset_ip": "string",
                      "asset_hostname": "string",
                      "asset_fqdn": "string",
                      "asset_mac": "string",
                      "first_and_last_logs": false,
                      "trim_logs": 1,
                      "template": "string",
                      "mitre": ""
                    },
                    "grouper": {
                      "id": "uuid",
                      "trace_id": "uuid",
                      "name": "string",
                      "grouped_by": [
                        "string"
                      ],
                      "aggregated_by": [
                        "string"
                      ],
                      "grouped_time_field": "string",
                      "grouped_time_type": "2023-12-20T00:00:01.652259Z",
                      "detection_windows": 5,
                      "detection_windows_unit": "ms",
                      "aggregate_count": 1,
                      "aggregate_unique": true
                    },
                    "actions": [
                      {
                        "TTL": "string",
                        "key": {
                          "_default": {
                            "type": "value",
                            "value": "string"
                          }
                        },
                        "type": "store-set",
                        "store": "string",
                        "value": "string",
                        "column": "string"
                      }
                    ],
                    "conditions": [
                      {
                        "type": "compare-condition",
                        "id": "uuid",
                        "parentId": null,
                        "negation": false,
                        "compareFn": "eq",
                        "expressions": [
                          {
                            "type": "logline-get",
                            "value": "string"
                          }
                        ]
                      }
                    ],
                    "version": 2
                  },
                  "test_data": [
                    {}
                  ],
                  "settings": {
                    "function_metrics": false,
                    "is_constructor": false,
                    "max_alerts": 1,
                    "max_alerts_per_second": 1,
                    "max_rule_memory_mb": 1
                  },
                  "active": true,
                  "reload": true,
                  "finding_id": "uuid",
                  "description": "string",
                  "lua": "string",
                  "is_retro": false,
                  "is_system": true,
                  "stats": {
                    "result_count": 1,
                    "error_count": 0
                  },
                  "is_error": 0,
                  "running_at": "2023-12-20T00:00:01.652259Z"
                }
              ],
              "_relations": {
                "logmule_go_rules": [
                  "497f6eca-6276-4993-bfeb-53cbbbba6f08"
                ]
              }
            }
          ],
          "finding": {
            "id": "uuid",
            "created_at": "2023-12-20T00:00:01.652259Z",
            "updated_at": "2023-12-20T00:00:01.652259Z",
            "trace_id": "uuid"
          },
          "logmule_go_results": [
            {
              "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
              "created_at": "2023-12-20T00:00:01.652259Z",
              "updated_at": "2023-12-20T00:00:01.652259Z",
              "rule_id": "uuid",
              "analysis_output": "string",
              "event": {},
              "compressed_event": "string",
              "risklevel": 5.35,
              "occurred_at": "2023-12-20T00:00:01.652259Z",
              "occurrence_id": "uuid",
              "error": "string",
              "service_asset_id": "uuid",
              "asset_info": {
                "ip": "string",
                "hostname": "string",
                "fqdn": "string",
                "mac": "string"
              },
              "incident_identifier": "string",
              "metadata": "{\"key\": \"value\"}",
              "logmule_go_rule": null,
              "occurrence": null,
              "service_asset": null,
              "service_asset_groups": [
                {
                  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
                  "created_at": "2023-12-20T00:00:01.652259Z",
                  "updated_at": "2023-12-20T00:00:01.652259Z",
                  "name": "string",
                  "network_ranges": [],
                  "domain": "string",
                  "itsm_synced": false,
                  "regex": "string",
                  "subject_id": "string",
                  "object_id": "string",
                  "is_kii": false,
                  "is_fincert": false,
                  "responsible_person": "string",
                  "technical_specialist": "string",
                  "system_id": "string",
                  "responsible_group_id": "2d40d7ca-3218-4132-89ef-42e29379a567",
                  "edited_by": "9501acb5-3be0-4719-a60e-dfa79624666c"
                }
              ],
              "_relations": {}
            }
          ],
          "rule_sets": [
            {
              "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
              "created_at": "2023-12-20T00:00:01.652259Z",
              "updated_at": "2023-12-20T00:00:01.652259Z",
              "name": "Набор 1",
              "create_service_asset_findings": false,
              "rule": null,
              "service_asset_groups": null
            }
          ],
          "service_asset_findings": [
            {
              "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
              "created_at": "2023-12-20T00:00:01.652259Z",
              "updated_at": "2023-12-20T00:00:01.652259Z",
              "description": "string",
              "risk_impact": "string",
              "solution": "string",
              "mitigation": "string",
              "status": "assigned_customer",
              "risklevel": 0,
              "service_asset_id": "09122f07-8b1e-48dc-96fd-379806f6c51e",
              "finding_id": "feebf65a-2eaa-4fae-aab2-772450efdffe",
              "analysis_output": "string",
              "synopsis": "string",
              "title": "string",
              "risk": "none",
              "acknowledged_at": "2023-12-20T00:00:01.652259Z",
              "alert_type": "automatic",
              "client_note": "string",
              "internal_note": "string",
              "external": false,
              "immediate_action_score": 0,
              "throughput_period": "grace",
              "throughput_period_change": "2023-12-20T00:00:01.652259Z",
              "customer_created": false,
              "c_visible_since": "2023-12-20T00:00:01.652259Z",
              "c_visible_since_in_days": 0,
              "c_reopened_count": 0,
              "c_last_customer_status_change": "2023-12-20T00:00:01.652259Z",
              "logmule_identifier": "string",
              "c_remote_exploitable": true,
              "c_occurrence_count": 0,
              "с_customer_retention_time": 0,
              "last_occurrence_id": "92c2542a-a9bb-4370-b835-20b1c9ac1fe9",
              "itsm_last_synced_at": "2023-12-20T00:00:01.652259Z",
              "itsm_sync_status": "scheduled",
              "external_id": "string",
              "itsm_sync_error": "string",
              "user_id": "a169451c-8525-4352-b8ca-070dd449a1a5",
              "updated_by": "deea00dc-b6b6-4412-a483-26ac61e1f6fe",
              "group_id": "306db4e0-7449-4501-b76f-075576fe2d8f",
              "acknowledged_by": "57e93f65-9db5-4b3c-8761-f3edd8ac8276",
              "created_by_customer": "d299b51b-03f1-4b72-b793-1fb027d05389",
              "edited_by": "9501acb5-3be0-4719-a60e-dfa79624666c",
              "incident_group_id": "5ce55b8d-2342-4286-bf58-bfe807f8c05c",
              "reopened_at": "2023-12-20T00:00:01.652259Z",
              "display_id": 0,
              "service_asset_name": "string",
              "service_asset_active": true,
              "occurrence_count": 0,
              "user_short_name": "string",
              "group_name": "string",
              "finding_display_id": 0,
              "reopened_count": 0,
              "event_type": "string",
              "finding_type": "string",
              "ports": [
                0
              ],
              "last_occurrence_ip": "string",
              "service_asset_value": 0,
              "tag_titles": [
                "string"
              ],
              "last_status_change": "2023-12-20T00:00:01.652259Z",
              "last_scan": "2023-12-20T00:00:01.652259Z",
              "authenticated": true,
              "last_occurrence": "2023-12-20T00:00:01.652259Z",
              "remote_exploitable": true,
              "service_asset_network_exposure": 0,
              "finding_category": "string",
              "display_title": "string",
              "customer_retention_time": 0,
              "visible_since": "2023-12-20T00:00:01.652259Z",
              "visible_since_in_days": 0,
              "last_customer_status_change": "2023-12-20T00:00:01.652259Z",
              "finding_title": "string",
              "incident_group_title": "string",
              "custom_values": {},
              "trace_id": "df570c03-5a03-4cea-8df0-c162d05127ac",
              "service_asset": {
                "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
                "created_at": "2023-12-20T00:00:01.652259Z",
                "updated_at": "2023-12-20T00:00:01.652259Z",
                "type": "Host",
                "name": "Актив",
                "description": "Описание актива",
                "coordinates": "--- []",
                "active": true,
                "scan_id": "9a59f0f5-5572-476d-a7fc-c960ef43a5af",
                "value": 3,
                "client_note": "string",
                "internal_note": "string",
                "location": "string",
                "network_exposure": 3,
                "responsible_person": "string",
                "technical_specialist": "string",
                "responsible_group_id": "2d40d7ca-3218-4132-89ef-42e29379a567",
                "edited_by": "9501acb5-3be0-4719-a60e-dfa79624666c"
              },
              "finding": {},
              "last_occurrence_entity": {
                "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
                "created_at": "2023-12-20T00:00:01.652259Z",
                "updated_at": "2023-12-20T00:00:01.652259Z",
                "event_type": "manual_source",
                "ip": "string",
                "mac": "string",
                "port": 0,
                "start_occurrence": "2023-12-20T00:00:01.652259Z",
                "end_occurrence": "2023-12-20T00:00:01.652259Z",
                "service_asset_finding_status_change_id": "8d6bf02f-aab2-4fbc-ab53-ee5963306be7",
                "service_asset_finding_id": "08a5c673-3c5c-48ab-bf6c-f2ee47d8df88",
                "fqdn": "string",
                "incident_identifier": "string",
                "fincert_sync_status": 10,
                "fincert_id": "",
                "sopka_sync_status": 10,
                "sopka_id": "",
                "fincert_sync_result": "7325f612-d464-4395-bb86-c83b3b6893fb",
                "sopka_sync_result": "d91aad7a-d9ad-4941-bf19-b94f42afada9"
              },
              "user": {},
              "group": {},
              "incident_group": {
                "title": "string",
                "description": "string",
                "user_id": "a169451c-8525-4352-b8ca-070dd449a1a5",
                "group_id": "306db4e0-7449-4501-b76f-075576fe2d8f"
              },
              "occurrences": [
                {
                  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
                  "created_at": "2023-12-20T00:00:01.652259Z",
                  "updated_at": "2023-12-20T00:00:01.652259Z",
                  "event_type": "manual_source",
                  "ip": "string",
                  "mac": "string",
                  "port": 0,
                  "start_occurrence": "2023-12-20T00:00:01.652259Z",
                  "end_occurrence": "2023-12-20T00:00:01.652259Z",
                  "service_asset_finding_status_change_id": "8d6bf02f-aab2-4fbc-ab53-ee5963306be7",
                  "service_asset_finding_id": "08a5c673-3c5c-48ab-bf6c-f2ee47d8df88",
                  "fqdn": "string",
                  "incident_identifier": "string",
                  "fincert_sync_status": 10,
                  "fincert_id": "",
                  "sopka_sync_status": 10,
                  "sopka_id": "",
                  "fincert_sync_result": "7325f612-d464-4395-bb86-c83b3b6893fb",
                  "sopka_sync_result": "d91aad7a-d9ad-4941-bf19-b94f42afada9"
                }
              ],
              "custom_field_values": [
                {
                  "custom_field_id": "a0fa4fc5-cabd-4219-9751-6d126c809065",
                  "service_asset_finding_id": "08a5c673-3c5c-48ab-bf6c-f2ee47d8df88",
                  "string_value": "string",
                  "integer_value": 0,
                  "float_value": 0,
                  "date_value": "2023-12-20T00:00:01.652259Z",
                  "json_value": {},
                  "boolean_value": true
                }
              ],
              "comments": [
                {}
              ],
              "documents": [
                {}
              ],
              "messages": [
                {
                  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
                  "created_at": "2023-12-20T00:00:01.652259Z",
                  "updated_at": "2023-12-20T00:00:01.652259Z",
                  "subject": "string",
                  "body": "string",
                  "service_asset_id": "09122f07-8b1e-48dc-96fd-379806f6c51e",
                  "service_asset_finding_id": "08a5c673-3c5c-48ab-bf6c-f2ee47d8df88",
                  "service_asset_finding_status_change_id": "8d6bf02f-aab2-4fbc-ab53-ee5963306be7",
                  "automated": true,
                  "finding_id": "feebf65a-2eaa-4fae-aab2-772450efdffe",
                  "itsm_sync_status": "not_synced",
                  "itsm_last_synced_at": "string",
                  "itsm_sync_error": "string",
                  "sender_id": "3194e023-c19f-4a42-9172-9e18d68e3a3a"
                }
              ],
              "service_asset_finding_status_changes": [
                {
                  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
                  "created_at": "2023-12-20T00:00:01.652259Z",
                  "updated_at": "2023-12-20T00:00:01.652259Z",
                  "service_asset_finding_id": "08a5c673-3c5c-48ab-bf6c-f2ee47d8df88",
                  "status": "string",
                  "revisit_at": "string",
                  "itsm_sync_status": "not_synced",
                  "itsm_last_synced_at": "string",
                  "itsm_sync_error": "string",
                  "user_id": "a169451c-8525-4352-b8ca-070dd449a1a5"
                }
              ],
              "service_asset_groups": [
                {
                  "title": "string",
                  "description": "string",
                  "user_id": "a169451c-8525-4352-b8ca-070dd449a1a5",
                  "group_id": "306db4e0-7449-4501-b76f-075576fe2d8f"
                }
              ],
              "_relations": {
                "occurrences": [
                  "497f6eca-6276-4993-bfeb-53cbbbba6f08"
                ],
                "custom_field_values": [
                  "497f6eca-6276-4993-bfeb-53cbbbba6f08"
                ],
                "comments": [
                  "string"
                ],
                "documents": [
                  "string"
                ],
                "messages": [
                  "string"
                ],
                "service_asset_finding_status_changes": [
                  "string"
                ],
                "service_asset_groups": [
                  "497f6eca-6276-4993-bfeb-53cbbbba6f08"
                ]
              }
            }
          ],
          "value_stores": [
            {
              "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
              "name": "uuid",
              "description": "string",
              "values_scheme": [
                {
                  "name": "field",
                  "type": "int",
                  "is_key": false
                }
              ],
              "is_large": true,
              "mask_values": true,
              "type": "pg",
              "version": 1,
              "source": "",
              "scheme": "vstore",
              "db_name": "vs_111dfca1defc11faa11dc11f1d11fd11",
              "user": "",
              "password": "",
              "store_count": 10,
              "content": null,
              "tollerId": "string",
              "_relations": {
                "logmule_go_rules": [
                  "497f6eca-6276-4993-bfeb-53cbbbba6f08"
                ]
              },
              "logmule_go_rules": {
                "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
                "created_at": "2023-12-20T00:00:01.652259Z",
                "updated_at": "2023-12-20T00:00:01.652259Z",
                "name": "string",
                "frontend_data": {
                  "alert": {
                    "id": "uuid",
                    "trace_id": "uuid",
                    "name": "string",
                    "create_incident": true,
                    "assign_to_customer": true,
                    "risk_level": 5.35,
                    "asset_ip": "string",
                    "asset_hostname": "string",
                    "asset_fqdn": "string",
                    "asset_mac": "string",
                    "first_and_last_logs": false,
                    "trim_logs": 1,
                    "template": "string",
                    "mitre": ""
                  },
                  "grouper": {
                    "id": "uuid",
                    "trace_id": "uuid",
                    "name": "string",
                    "grouped_by": [
                      "string"
                    ],
                    "aggregated_by": [
                      "string"
                    ],
                    "grouped_time_field": "string",
                    "grouped_time_type": "2023-12-20T00:00:01.652259Z",
                    "detection_windows": 5,
                    "detection_windows_unit": "ms",
                    "aggregate_count": 1,
                    "aggregate_unique": true
                  },
                  "actions": [
                    {
                      "TTL": "string",
                      "key": {
                        "_default": {
                          "type": "value",
                          "value": "string"
                        }
                      },
                      "type": "store-set",
                      "store": "string",
                      "value": "string",
                      "column": "string"
                    }
                  ],
                  "conditions": [
                    {
                      "type": "compare-condition",
                      "id": "uuid",
                      "parentId": null,
                      "negation": false,
                      "compareFn": "eq",
                      "expressions": [
                        {
                          "type": "logline-get",
                          "value": "string"
                        }
                      ]
                    }
                  ],
                  "version": 2
                },
                "test_data": [
                  {}
                ],
                "settings": {
                  "function_metrics": false,
                  "is_constructor": false,
                  "max_alerts": 1,
                  "max_alerts_per_second": 1,
                  "max_rule_memory_mb": 1
                },
                "active": true,
                "reload": true,
                "finding_id": "uuid",
                "description": "string",
                "lua": "string",
                "is_retro": false,
                "is_system": true,
                "stats": {
                  "result_count": 1,
                  "error_count": 0
                },
                "is_error": 0,
                "running_at": "2023-12-20T00:00:01.652259Z"
              }
            }
          ],
          "_relations": {
            "logmule_go_filters": [
              "497f6eca-6276-4993-bfeb-53cbbbba6f08"
            ],
            "logmule_go_modules": [
              "497f6eca-6276-4993-bfeb-53cbbbba6f08"
            ],
            "logmule_go_results": [
              "497f6eca-6276-4993-bfeb-53cbbbba6f08"
            ],
            "rule_sets": [
              "497f6eca-6276-4993-bfeb-53cbbbba6f08"
            ],
            "service_asset_findings": [
              "497f6eca-6276-4993-bfeb-53cbbbba6f08"
            ],
            "value_stores": [
              "497f6eca-6276-4993-bfeb-53cbbbba6f08"
            ]
          }
        }
      ],
      "messages": [
        {
          "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
          "created_at": "2023-12-20T00:00:01.652259Z",
          "updated_at": "2023-12-20T00:00:01.652259Z",
          "subject": "string",
          "body": "string",
          "service_asset_id": "09122f07-8b1e-48dc-96fd-379806f6c51e",
          "service_asset_finding_id": "08a5c673-3c5c-48ab-bf6c-f2ee47d8df88",
          "service_asset_finding_status_change_id": "8d6bf02f-aab2-4fbc-ab53-ee5963306be7",
          "automated": true,
          "finding_id": "feebf65a-2eaa-4fae-aab2-772450efdffe",
          "itsm_sync_status": "not_synced",
          "itsm_last_synced_at": "string",
          "itsm_sync_error": "string",
          "sender_id": "3194e023-c19f-4a42-9172-9e18d68e3a3a"
        }
      ],
      "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
      "created_at": "2023-12-20T00:00:01.652259Z",
      "updated_at": "2023-12-20T00:00:01.652259Z",
      "_relations": {
        "service_asset_findings": [
          "497f6eca-6276-4993-bfeb-53cbbbba6f08"
        ],
        "rules": [
          "497f6eca-6276-4993-bfeb-53cbbbba6f08"
        ],
        "messages": [
          "497f6eca-6276-4993-bfeb-53cbbbba6f08"
        ]
      }
    }
  ],
  "total": 1
}

Другие возможные ответы

Код Ответ Описание
400 Bad Request Неверный тип параметра запроса, либо отсутствует обязательный параметр
500 Internal Server Error Другие ошибки сервера

Примечание: Текст ошибки не фиксированный, может изменяться в зависимости от фактического ответа получателя запроса.

Пример ответа 
   
Код 400   


{
  "error": "Bad Request",
  "error_code": 400
}






   
Код 500   


{
  "error": "Internal Server Error",
  "error_code": 500
}