Fetch Events for an Incident API

Parameter	Mandatory/Optional	Data Type	Description
incidentId	Mandatory	String	ID of the incident you want to fetch the events for.
filter	Optional	String	Filter the incidents list by providing a query using Qualys syntax. Refer to the “How to Search” topic in the online help for assistance with creating your query. For example - dateTime:['2019-02-25T18:30:00.000Z'..'2019-02-26T18:29:59.999Z'] AND status:`OPEN` For the dateTime filter start date should not be lower than 2017-01-01. The processedTime filter can be used only for events generated post FIM release 2.0.2. To comply with data retention policy, the API fetches data only from the last 15 months. For more information, refer to Data Retention Policy.
pageNumber	Optional	String	The page to be returned. Starts from zero.
pageSize	Optional	String	The number of records per page to be included in the response. Default is 10.
sort	Optional	String	Sort the results using a Qualys token. For example - [{\"action\":\"asc\"}]
attributes	Optional	String	Search based on certain attributes (provide comma-separated list).
Authorization	Mandatory	String	Authorization token to authenticate to the Qualys Cloud Platform. Prepend token with "Bearer" and one space. For example - Bearer authToken

API Request

curl -X POST
 <qualys_base_url>/fim/v2/incidents/{incidentId}/events/search 
-H 'authorization: Bearer <token> '
-H 'content-type: application/json' 
-d @request.json

Contents of request.json:

{
  "sort": "[{\"name\":\"desc\"}]",
  "pageNumber": 2,
  "attributes": "name"
}

Response

[
  {
    "sortValues": [
      "x86_microsoft-windows-t..icesframework-msctf_31bf3856ad364e35_6.1.7601.23915_none_78558f3c6624167c"
    ],
    "data": {
      "name": "x86_microsoft-windows-t..icesframework-msctf_31bf3856ad364e35_6.1.7601.23915_none_78558f3c6624167c",
      "id": "8x340728-411x-37x1-x028-0xxx41362xxx"
    }
  },
  {
    "sortValues": [
      "x86_microsoft-windows-t..-collaboration-core_31bf3856ad364e35_6.1.7601.23892_none_bd47535b6dcd4b69"
    ],
    "data": {
      "name": "x86_microsoft-windows-t..-collaboration-core_31bf3856ad364e35_6.1.7601.23892_none_bd47535b6dcd4b69",
      "id": "6f5878be-3abe-32b7-a943-d9b6c982190f"
    }
  },
  {
    "sortValues": [
      "x86_microsoft-windows-t..-collaboration-core_31bf3856ad364e35_6.1.7601.23892_none_bd47535b6dcd4b69"
    ],
    "data": {
      "name": "x86_microsoft-windows-t..-collaboration-core_31bf3856ad364e35_6.1.7601.23892_none_bd47535b6dcd4b69",
      "id": "c9f2dea8-a14c-34e8-b2dc-a20d282bee73"
    }
  },
  {
    "sortValues": [
      "x86_microsoft-windows-t..-collaboration-core_31bf3856ad364e35_6.1.7601.23892_none_bd47535b6dcd4b69"
    ],
    "data": {
      "name": "x86_microsoft-windows-t..-collaboration-core_31bf3856ad364e35_6.1.7601.23892_none_bd47535b6dcd4b69",
      "id": "87x0x9x7-0518-3974-86x3-x48712323147"
    }
  },
  {
    "sortValues": [
      "x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.1.7601.23896_none_e9b14bab8385266b"
    ],
    "data": {
      "name": "x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.1.7601.23896_none_e9b14bab8385266b",
      "id": "3e68b55b-eff3-35ab-9c7f-95ad3be33c34"
    }
  },
  {
    "sortValues": [
      "x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.1.7601.23896_none_e9b14bab8385266b"
    ],
    "data": {
      "name": "x86_microsoft-windows-shdocvw_31bf3856ad364e35_6.1.7601.23896_none_e9b14bab8385266b",
      "id": "e5bd74f2-03b9-301d-ba96-34b3d8a6bd7c"
    }
  },
  {
    "sortValues": [
      "x86_microsoft-windows-shdocvw.resources_31bf3856ad364e35_6.1.7601.23896_en-us_c9ff1fadd1da973e"
    ],
    "data": {
      "name": "x86_microsoft-windows-shdocvw.resources_31bf3856ad364e35_6.1.7601.23896_en-us_c9ff1fadd1da973e",
      "id": "ea9e8bc7-1895-34fc-b2a7-f6c42be0ed0a"
    }
  },
  {
    "sortValues": [
      "x86_microsoft-windows-shdocvw.resources_31bf3856ad364e35_6.1.7601.23896_en-us_c9ff1fadd1da973e"
    ],
    "data": {
      "name": "x86_microsoft-windows-shdocvw.resources_31bf3856ad364e35_6.1.7601.23896_en-us_c9ff1fadd1da973e",
      "id": "a5d68c5e-5f9e-3cc5-976f-8331e4404a73"
    }
  },
  {
    "sortValues": [
      "x86_microsoft-windows-shdocvw.resources_31bf3856ad364e35_6.1.7601.23896_en-us_c9ff1fadd1da973e"
    ],
    "data": {
      "name": "x86_microsoft-windows-shdocvw.resources_31bf3856ad364e35_6.1.7601.23896_en-us_c9ff1fadd1da973e",
      "id": "452af9e5-c926-39a5-8a7d-e6b25a43a828"
    }
  },
  {
    "sortValues": [
      "x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23915_none_c64a109218ef01b4"
    ],
    "data": {
      "name": "x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.23915_none_c64a109218ef01b4",
      "id": "249e4bdf-aad5-3ddd-bbbf-03f45eecd137"
    }
  }
]