I am using devGetDeviceList(...) to pull a list of receivers, and running dsGetDataSourceList(...) to pull data sources from them. However I need to go deeper and pull the clients/group IPSIDs for each data source.
Is there a v2 API that can handle this task?
Unfortunately there's no child data sources in dsGetDataSourceDetail()...
However I just happened to try grpGetDeviceTreeEx() just now and it pulled the entire device tree, so just FYI.
Apologies, looks like I am sending the query to devGetDeviceList, using types BUCKET, THIRD_PARTY, EPO_APP, NSM_SENSOR and iterating through the results to dsGetDataSourceDetail to extrapolate the additional details.
Have you tried to use the API Python wrapper (https://github.com/mfesiem/msiempy) ? More specifically the DevTree object. It loads all Datasources informations into one simple list object and let you access and filter all items.
from msiempy.device import DevTree devtree = DevTree() print("All Datasources") print(devtree.get_text(fields=['parent_name', 'name']))
See datasource docs here for list of fields and more documentation : https://mfesiem.github.io/docs/msiempy/device.html#msiempy.device.DataSource
The code will list all your Datasources displaying only their name and parent name, but much more infos are accessible.
All Datasources | parent_name | name | | n/a | Local ESM | | Local ESM | ePolicy Orchestrator | | ePolicy Orchestrator | ePolicy Orchestrator_Endpoint Security Adaptive Threat Protection (ePO) | | ePolicy Orchestrator | ePolicy Orchestrator_Endpoint Security Firewall (ePO) | | ePolicy Orchestrator | ePolicy Orchestrator_Endpoint Security Platform (ePO) | | ePolicy Orchestrator | ePolicy Orchestrator_Endpoint Security Threat Prevention (ePO) | | ePolicy Orchestrator | ePolicy Orchestrator_Endpoint Security Web Control (ePO) | | ePolicy Orchestrator | ePolicy Orchestrator_ePO Audit Log (ePO) | | ePolicy Orchestrator | ePolicy Orchestrator_ePolicy Orchestrator Agent (ePO) | | ePolicy Orchestrator | ePolicy Orchestrator_TIE | | Local ESM | Local Receiver-ELM | | Local Receiver-ELM | CS CEF | | Local Receiver-ELM | Test Datasource |