Use this REST API call to retrieve and decrypt the referenced Trellix Data Loss Prevention evidence file.
POST request URL
https://<epo_server_name:port>rest/dlp/event/evidence/get?fileLocation={fileLocation}
Where, epo_server_name port is the server IP address and port number.
Request Parameters
Parameter name | Description | Required | Values |
|---|---|---|---|
Authorization | User credentials for ePO - On-prem. | Required | |
fileLocation | Full path of the file location including the file name. File location must be given from Storage Share location in the ePO - On-prem server. | Required | String |
Sample POST request URL
https://172.27.108.53:8443/rest/dlp/event/evidence/get?fileLocation=C:/EvidenceFiles/EB/7B/15EB7BA2-AE28-76C3-66FE-C7016E7D2E38.xlsx.dlpenc
Sample cURL command
curl --location --request POST 'https://172.27.108.53:8443/rest/dlp/event/evidence/get?fileLocation=C:/EvidenceFiles/EB/7B/15EB7BA2-AE28-76C3-66FE-C7016E7D2E38.xlsx.dlpenc'
Sample response
The response will return Decrypted DLP Evidence file which can be downloaded.
Status and error codes
List of HTTP status codes returned for the query.
Code | Description |
|---|---|
200 OK | The response returns decrypted Trellix Data Loss Prevention evidence file which can be downloaded. |
400 Bad Request | Returns a bad request if fileLocation is missing or empty. |
404 Not Found | Incorrect ePO - On-prem URL. |
500 Internal Server Error | An error on the server side that failed the request. See the ePO - On-prem |