Fetch Incident Count API 

Parameter	Mandatory/Optional	Data Type	Description
filter	Optional	String	Filter the events list by providing a query using Qualys syntax. Refer to the “How to Search” topic in the online help for assistance with creating your query. For example - dateTime:['2019-02-25T18:30:00.000Z'..'2019-02-26T18:29:59.999Z'] AND action: 'Content' Note: For dateTime filter start date should not be lower than 2017-01-01. The processedTime filter can be used only for events generated post FIM release 2.0.2.
groupBy	Optional	String	Group results based on certain parameters (provide comma separated list). For example - action
interval	Optional	String	GroupBy interval for date fields. Valid values are y(year), q(quarter), M(month), w(week), d(day), h(hour), m(minute), s(second). For example - 1d An interval lower than a second is not supported. Value for each interval period should be 1. For example, you can specify an interval of 1y, 1M, 1w, and so on, but not 2y, 3M, etc
limit	Optional	String	Limit the number of rows fetched by the groupBy function.
sort	Optional	String	Sort the results using a Qualys token. For example - [{\"name\":\"asc\"}]

API Request

curl -X POST 
<qualys_base_url>/fim/v2/incidents/count 
-H 'authorization: Bearer <token> ' 
-H 'content-type: application/json' 
-d @request.json

Contents of request.json

{
  "filter": "status:OPEN",
  "groupBy": [
    "approvalType",
    "name",
    "id"
  ]
}

Response

{
  "MANUAL": {
    "Incident-3a899bb5-493e-40b8-a348-408dee7b2314-pod01_rule_15": {
      "af72cee0-3dd7-4173-b6ff-c0dfd1ad0465": 1,
      "70da4a11-35df-40a2-b20d-9878389d63d9": 1,
      "435d4e5b-753e-455f-bc64-7ebbdab38cad": 1
    },
    "Incident-4b5c6f12-a3dc-48d3-b9f5-be01d35449e7-pod01_rule_16": {
      "689ea586-5c41-462e-b9f9-41635fa71889": 1,
      "b9760652-e642-43e3-a1bc-27441bd590c8": 1,
      "56660ef6-a0ed-447e-8738-4d2b26f44026": 1
    },
    "Incident-d353f6bc-11d8-480e-a26a-3fb3a4324689-pod01_rule_14": {
      "d31f45da-f3b2-4a91-a84a-36992966c6ec": 1,
      "7556fce9-a928-43b4-9724-1849f0650db1": 1,
      "45630e02-bbee-44a8-9b89-966b95ef62a3": 1
    },
    "Incident-aa85ac30-ce17-4370-ba1d-7471d8a0fa35-pod01_rule_29": {
      "e24ec4e4-87e1-49dd-b3ed-91959673da32": 1,
      "85eb37a0-0b64-45de-95b9-668eaa58eca8": 1
    },
    "Incident-47a9fce9-2b4c-4d2a-ab84-9853a41225d7-pod01_rule_27": {
      "7f41087e-2d1d-4514-806f-d51fd78e312c": 1,
      "e913313d-eda2-4c4d-9550-32cae546f4b7": 1
    },
    "Incident-f534db2b-d4fa-43cb-a550-c2cce44e02f4-pod01_rule_25": {
      "3907d4bd-3755-4191-89c3-d6f4e31fcd6e": 1,
      "f29cb285-e2a0-434e-9240-63b00bd420df": 1
    },
    "Incident-70060303-29a1-47b7-bd7a-17409cf1049b-pod01_rule_33": {
      "b8b89269-f82d-4e08-bed5-607540930baa": 1,
      "ae70ad1b-f841-4ad9-9a92-49a481dd0383": 1
    },
    "Incident-84e3c230-5ce9-49bd-9a19-7ab9a63f5f48-pod01_rule_28": {
      "50f8cfb8-383d-4605-85a8-e85968e6f8ef": 1,
      "3e020d72-c903-4076-bd43-f0a85b3275bf": 1
    },
    "Incident-a170f7bf-e74d-41bc-bb76-0ddbed938794-pod01_rule_21": {
      "1f995877-6123-4308-ae71-7086a597972e": 1,
      "d20a61d4-9ec0-43ca-b6c1-c7ca93933ed3": 1
    },
    "Incident-f050635e-f1ce-4059-beed-f144b66de3c2-pod01_rule_24": {
      "0678d417-af29-4ca9-9dc5-6cefacb459c9": 1,
      "65e51413-4802-415c-b8a5-469f7cd5f151": 1
    }
  }
}