[Index]
A policy defining a group of alerting rules.
Model ref.: data/AlertingPolicy
The full URL would include the host-proxy name: https://[host-proxy].
Variables are enclosed in square brackets.
{ "$schema": "http://json-schema.org/draft-03/schema", "type": "object", "properties": { "name": { "title": "Policy Name", "description": "Name of the alerting policy. This must be unique per hierarchy.", "type": "string", "maxLength": 255, "required": true }, "description": { "title": "Description", "description": "Provide a brief description of this policy.", "type": "string", "maxLength": 2048 }, "enabled": { "title": "Enabled", "description": "Is this policy enabled?", "type": "boolean" }, "policy_filters": { "title": "Filters", "description": "Global filters to apply before processing policy rules.", "type": "array", "items": { "type": "object", "properties": { "description": { "title": "Name", "type": "string" }, "location": { "title": "Location", "type": "string", "required": true, "choices": [ { "value": "header", "title": "Header" }, { "value": "raw_log", "title": "Raw log" } ] }, "pattern_type": { "title": "Pattern Type", "type": "string", "required": true, "choices": [ { "value": "match", "title": "Match" }, { "value": "match_extract", "title": "Match/Extract" } ] }, "pattern": { "title": "Pattern", "description": "Header name or regular expression for raw logs.", "type": "string" }, "function": { "title": "Function", "type": "string", "choices": [ { "value": "Greater Than", "title": "Greater Than" }, { "value": "Less Than", "title": "Less Than" }, { "value": "Same", "title": "Same" } ] }, "function_value": { "title": "Function Value", "type": "integer" }, "token": { "title": "Token", "description": "used for alert message output order", "type": "integer" } } } }, "enrichment": { "title": "Enrichment", "description": "Enrich the alert with table details or additional verbage.", "type": "array", "items": { "type": "object", "properties": { "location": { "title": "Location", "type": "string", "required": true, "choices": [ { "value": "lookup in table", "title": "table" }, { "value": "custom string", "title": "custom" } ] }, "item": { "title": "Item", "type": "string" }, "token": { "title": "Token", "description": "used for alert message output order", "type": "integer" } } } } }, "schema_version": "0.2" }
Task | Call | URL | Parameters | Response |
---|---|---|---|---|
Get the GUI Add form. | GET | /api/data/AlertingPolicy/add/ |
|
The GUI Add form of data/AlertingPolicy as JSON |
The API call to the /add/ URL can only be made from a hierarchy that allows the model type to be added. The actions in the response shows the url for the POST API call to create an instance.
Task | Call | URL | Parameters | Payload |
---|---|---|---|---|
Create | POST | /api/data/AlertingPolicy | hierarchy=[hierarchy] |
|
tool/Transaction/[trans pkid]to inspect the created resource and its instance pkid.
Task | Call | URL | Parameters | Payload |
---|---|---|---|---|
Bulk delete [pkid1],[pkid2]... | DELETE | /api/data/AlertingPolicy/ | hierarchy=[hierarchy] | {"hrefs":["/api/data/AlertingPolicy/[pkid1]", "/api/data/AlertingPolicy/[pkid2]", ...]} |
GET http://[host-proxy]/api/data/AlertingPolicy/?hierarchy=[hierarchy]&format=json
Task | Call | URL | Parameters | Payload |
---|---|---|---|---|
Get a selected [export_format] of the schema and instances [pkid1], [pkid2],... of data/AlertingPolicy; optionally with tag_version at [version] and Configuration Template as [configtemplate]. | POST | /api/data/AlertingPolicy/export/ |
|
{ "hrefs":["/api/data/AlertingPolicy/[pkid1]", "/api/data/AlertingPolicy/[pkid2]",...]}} |
For export_format=json, the response is a time stamped zip file of data in JSON as in the system database. Item properties such as strings that are empty or Boolean values that are not set, are not included. The filename in the response is of the format as the example:
Content-Disposition: attachment; filename=export_2013-05-17_14:20:19.186444.json.zip Content-Language:en Content-Type:application/x-zip
For export_format=raw_xlsx, the response is a MS Excel spreadsheet with columns corresponding to the JSON format export and a response filename format:
Content-Disposition: attachment; filename=<resource_type>_<resource_name>_exportedsheet_CCYY-MM-DD_HH-MM-SS.xlsx Content-Language:en Content-Type:application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
For export_format=xlsx, the response is a MS Excel spreadsheet, arranged by any Field Display Policies that apply. The columns correspond with those of a Bulk Load Template export sheet. The response filename format is:
Content-Disposition: attachment; filename=<resource_type>_<resource_name>_exportedsheet_formatted_CCYY-MM-DD_HH-MM-SS.xlsx Content-Language:en Content-Type:application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
The XLSX format can be used to bulk load instances of data/AlertingPolicy and the JSON format can be used to import instances of data/AlertingPolicy.
GET http://[host-proxy]/api/data/AlertingPolicy/?hierarchy=[hierarchy]
Task | Call | URL | Parameters | Response |
---|---|---|---|---|
Get a compressed format of the Bulk Load spreadsheet template for data/AlertingPolicy | POST | /api/data/AlertingPolicy/export_bulkload_template/ |
|
The response is an attachment of the format: filetype_bulkloadsheet.xlsx.gz |
Task | Call | URL | Parameters | Response |
---|---|---|---|---|
Configuration Template | GET | /api/data/AlertingPolicy/configuration_template/ | hierarchy=[hierarchy] |
|
POST http://[host-proxy]/api/data/ConfigurationTemplate/?hierarchy=[hierarchy]
Task | Call | URL | Parameters | Response |
---|---|---|---|---|
Field Display Policy | GET | /api/data/AlertingPolicy/field_display_policy/ | hierarchy=[hierarchy] |
|
POST http://[host-proxy]/api/data/FieldDisplayPolicy/?hierarchy=[hierarchy]
Task | Call | URL | Parameters | Response |
---|---|---|---|---|
List | GET | /api/data/AlertingPolicy/ |
|
The data/AlertingPolicy schema and all instances as JSON. |
(The list will return 0 to 3 data/AlertingPolicy instances)
{ "pagination": { "skip": 0, "limit": 3, "maximum_limit": 2000, "total": 0, "total_limit": null, "order_by": "name", "direction": "asc", "current": "/api/data/AlertingPolicy/?skip=0&limit=3&order_by=name&direction=asc&traversal=down" }, "operations": [ "list", "help", "bulk_update_form", "field_display_policy", "get", "configuration_template", "update", "migration", "remove", "add", "export", "export_bulkload_template", "transform" ], "meta": { "model_type": "data/AlertingPolicy", "summary_attrs": [ { "name": "name", "title": "Policy Name" }, { "name": "description", "title": "Description" }, { "name": "enabled", "title": "Enabled" }, { "name": "hierarchy_friendly_name", "title": "Located At", "allow_filtering": true } ], "tagged_versions": [], "tags": [], "title": "?", "business_key": { "unique": [ "name" ], "hierarchy": true }, "api_version": "21.2", "cached": true, "references": { "children": [], "parent": [ { "href": "/api/data/HierarchyNode/6t0ggef2c0deab00hb595101", "pkid": "6t0ggef2c0deab00hb595101" } ], "device": [ { "href": "", "pkid": "" } ], "foreign_key": [] }, "model_specific_actions": [ "get", "list", "add", "update", "remove", "export", "export_bulkload_template", "configuration_template", "field_display_policy", "help" ], "schema_version": "0.2", "actions": [ { "add": { "method": "GET", "class": "add", "href": "/api/data/AlertingPolicy/add/?hierarchy=[hierarchy]", "support_async": false, "title": "Add" } }, { "remove": { "method": "DELETE", "class": "delete", "href": "/api/data/AlertingPolicy/?hierarchy=[hierarchy]", "support_async": true, "title": "Delete" } }, { "export": { "method": "POST", "class": "export", "href": "/api/data/AlertingPolicy/export/?hierarchy=[hierarchy]", "support_async": false, "title": "Export", "view": "/api/view/ExportData/add/?auth_token=[authtoken], "submit": "payload" } }, { "export_bulkload_template": { "method": "POST", "class": "bulkload_template", "href": "/api/data/AlertingPolicy/export_bulkload_template/?hierarchy=[hierarchy]", "support_async": false, "title": "Export Bulk Load Template" } }, { "configuration_template": { "method": "GET", "class": "config", "href": "/api/data/AlertingPolicy/configuration_template/?hierarchy=[hierarchy]", "support_async": false, "title": "Configuration Template" } }, { "field_display_policy": { "method": "GET", "class": "display_policy", "href": "/api/data/AlertingPolicy/field_display_policy/?hierarchy=[hierarchy]", "support_async": false, "title": "Field Display Policy" } }, { "list": { "method": "GET", "class": "list", "href": "/api/data/AlertingPolicy/?hierarchy=[hierarchy]", "support_async": false, "title": "List" } }, { "help": { "method": "GET", "class": "help", "href": "/api/data/AlertingPolicy/help?hierarchy=[hierarchy]", "support_async": false, "title": "Help" } } ] }, "resources": [] }
Task | Call | URL | Parameters | Response |
---|---|---|---|---|
Get the on-line Help for data/AlertingPolicy. | GET | /api/data/AlertingPolicy/help | hierarchy=[hierarchy] | On-line help of Model ref.: data/AlertingPolicy as HTML |
Task | Call | URL | Parameters | Payload |
---|---|---|---|---|
Modify | PUT | /api/data/AlertingPolicy/[pkid] | hierarchy=[hierarchy] | (For payload specification) |
For Bulk modification, refer to the Bulk Modify section.
Task | Call | URL | Parameters | Response |
---|---|---|---|---|
Delete | DELETE | /api/data/AlertingPolicy/[pkid] | hierarchy=[hierarchy] |
Task | Call | URL | Parameters | Response |
---|---|---|---|---|
Get a selected [export_format] of the schema and a single instance with [pkid] of data/AlertingPolicy; optionally with tag_version at [version] and Configuration Template as [configtemplate]. | GET | /api/data/AlertingPolicy/[pkid]/export |
|
The response is an attachment. Refer to the list below. |
For export_format=raw_xlsx, the response is a "raw" MS Excel spreadsheet with columns corresponding to the JSON format export and a response format:
Content-Disposition: attachment; filename=<resource_type>_<resource_name>_exportedsheet_CCYY-MM-DD_HH-MM-SS.xlsx Content-Language:en Content-Type:application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
For export_format=xlsx, the response is a MS Excel spreadsheet, formatted to show all columns and a response format:
Content-Disposition: attachment; filename=<resource_type>_<resource_name>_exportedsheet_formatted_CCYY-MM-DD_HH-MM-SS.xlsx Content-Language:en Content-Type:application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
For export_format=json, the response is a time stamped zip file of data in JSON and a response format:
Content-Disposition: attachment; filename=export_2013-05-17_14:20:19.186444.json.zip Content-Language:en Content-Type:application/x-zip
The XLSX format can be used to bulk load instances of data/AlertingPolicy and the JSON format can be used to import instances of data/AlertingPolicy.
For Bulk Export, refer to the Bulk Export section.
Task | Call | URL | Parameters | Response |
---|---|---|---|---|
Get | GET | /api/data/AlertingPolicy/[pkid] | hierarchy=[hierarchy] | The data/AlertingPolicy instance with [pkid]. |
Task | Call | URL | Parameters | Response |
---|---|---|---|---|
Help | GET | /api/data/AlertingPolicy/[pkid]/help | hierarchy=[hierarchy] | The on-line Help for data/AlertingPolicy. |