cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
pfabrizi
Level 9
Report Inappropriate Content
Message 1 of 3

ESM API Question

I am able to get my case details but the detail is limited to a few fields lile ID, summary, eventid. I was looking to see if it is possible to retrieve details of the source event?

I am on version 9.4.2 and using C#

Thank You!

2 Replies

Re: ESM API Question

Moved to SIEM for better handling.

---

Peter

Moderator

itgfcsys
Level 9
Report Inappropriate Content
Message 3 of 3

Re: ESM API Question

pfabrizi

Some of these may help you

 

- <esmCommand name="qryGetCorrEventDataForID">

  <description>Get the source events and flows for a
given correlated event ID
</description>

  </esmCommand>

- <esmCommand name="qryGetFilterFields">

  <description>Get all fields that can be used in
query filters, with type information for each field.
</description>

  </esmCommand>

  - <esmCommand name="qryGetResults">

  <description>Get the results for a query.</description>

  </esmCommand>

- <esmCommand name="qryGetSelectFields">

  <description>Get the fields available for selecting
in queries. The groupType can be used to filter the fields to only ones that
can be used to group results in a particular way. For example, if you want all
fields that can be grouped to count the number of events per group, the
groupType should be COUNT. If not provided, it is equivalent to passing
NO_GROUP which returns all available select fields regardless of whether they
can be used in grouped queries. This is useful for getting available fields for
detail queries. (qryExecuteDetail)
</description>

  </esmCommand>

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community