Anomalies

Last updated
Save as PDF

The Anomalies Report returns information about all detected anomalies for a tenant within a specified timeframe. This report is equivalent to the one available on the Shadow IT Services Anomalies page.

Endpoint Name

https://{{fabric}}/shnapi/rest/reporting/csv/queryAnomalies

Required Headers

Authorization: User name and password used to access SSE.
Content-Type: Application/json

Required Parameters

templateId : Must always be set to 10 (integer)

Optional Parameters

eventFilter
serviceidentifiers
anomalyidentifiers
userIdentifiers
userOrIP

Sample Request

{
"templateId": 10,
"eventFilter":
{ "from": "2024-02-12T00:00:00", "to": "2024-02-12T05:00:00" }
,
"tableVisbilityMap":
{ "Severity": "true", "Service Name": "true", "Date / Time": "true", "Anomaly Type": "true", "Activity Type": "true", "Response": "true", "User Risk Level": "true", "User / IP Address": "true", "Anomaly Value": "true", "Threshold": "true", "Destination Host": "true" }
}

Sample Response

Severity,ID,Service Name,Date / Time,Anomaly Type,Activity Type,Response,User Risk Level,User / IP Address,Anomaly Value,
Threshold Medium,365900209,Yandex.disk,21-Aug-2014 13:59:59,Data Transfer,Download,Allowed,Medium,
74411485CE2CB0C1167A71664B5F76ED8EADF338,54883903,2000185 Medium,365887884,Yandex.disk,
21-Aug-2014 20:16:35,Data Transfer,Download,Allowed,Medium,74411485CE2CB0C1167A71664B5F76ED8EADF338,54883902,2000185
High,365900189,Yandex.disk,22-Aug-2014 14:13:04,Unsupported Device,Download,Allowed,Medium,
7CE1813E3C7EB692C3D95811519954FE6C923795,, Low,365900213,Yandex.disk,22-Aug-2014 17:27:36,Data Transfer,Download,
Allowed,Medium,DD11A1F44CCA6FFE08C2AC9AEC4AFAA41728A7C3,20900493,2000185