Perform Remediation Action on Event

For API version information, refer to the API Version History section.

Non-Versioned

This API allows you to take remediation actions on selected events.

POST/ioc/remediation-actions/performAction

Input Parameters for Remediation Action on EventInput Parameters for Remediation Action on Event

Input Parameters	Mandatory/Optional	Format	Description
Authorization	Mandatory	String	Authorization token to authenticate to the Qualys Enterprise TruRisk™ Platform. Prepend token with "Bearer" and one space. For example - Bearer authToken
user	Mandatory	String	Name of the user associated with the action.
userId	Mandatory	String	User Id of the user associated with the action.
comment	Optional	String	Use the comment parameter to mention the reason behind the action.

Sample - Perform Remediation Action on EventSample - Perform Remediation Action on Event

API request

curl -X POST "<qualys_base_url>/ioc/remediation-actions/performAction?user=username&userId=XXc42aXX-03XX-XXdd-aXX8-42fXXXd7cXXX" --header "accept: */*" --header "Authorization: Bearer <token>"-H "Content-Type: application/json" -d "<JSON payload>"

Sample JSON Payload

[ 
  { 
    "actionId": 0, 
    "agentId": "XXX85f64-5XX7-XX62-b3XX-XX963f6XXfaX", 
    "eventId": "string", 
    "eventType": "string", 
    "pid": 0, 
    "uniqueId": "string" 
  } 
]

Response

{
  "remediationIds": [
    "RTF_4ea39afb-be5a-47a3-ae66-cdcfe0494007_2-2025_2c3afaac-66be-3c1f-adc1-54d41e90336a"
  ]
}

Response Field DescriptionsResponse Field Descriptions

Dataset Name	Field Name	Data Type	Description
remediation-action	remediationIds	Array of Strings	A list of unique identifiers for the remediation actions. Each ID corresponds to a specific remediation event.

V1.0