REST API call to retrieve the list of resolution options

You can retrieve the list of resolution options that are set for the specified incident nature.

GET request URL

https://<epo_server_name:port>/rest/dlp/incidents/resolutions/list?incidentNature={n}

Where

epo_server_name:port is the server IP address and port number.
incidentNature={n} n can be 1, 2, or 3 for incidents of different data vectors (incident nature). Based on the value of n specified, resolution options set for different data vectors are retrieved.

Request Parameters

Parameter name	Description	Required	Values
Authorization	User credentials for ePO - On-prem.	Required
incidentNature={n}	Incidents generated for data-in-use/motion and data-at-rest can have the same incident IDs. Specify n to differentiate the incident nature. Based on the data vectors, {n} can be: 1 = Retrieve incident details generated for data-in-use/motion 2 = Reserved to retrieve data-at-rest - Endpoint Discovery incidents and can be used when support for Endpoint Discovery custom attributes is added into the product 3 = Retrieve incident details generated for data-at-rest - Network	Required	Number

Sample GET request URL

https://172.27.108.53:8443/rest/dlp/incidents/resolutions/list?incidentNature=1

Sample cURL command

curl -k -v -X GET 'https://172.27.108.53:8443/rest/dlp/incidents/resolutions/list?incidentNature=1' -u '<user>:<password>'

Response parameters

The response to this API call returns the list of resolution options that set for the specified incident nature.

Element		Description	Data type
resolutions		Possible resolution options for the specified incident nature.	string

Sample response

{
    "1": "None",
    "2": "Case Opened",
    "3": "Resolved - HR notified",
    "4": "Resolved - Manager notified",
    "5": "Resolved - User notified",
    "6": "Closed - Authorized",
    "7": "Closed - Business workflow",
    "8": "Closed - False positive",
    "9": "Closed - Test"
}

Status and error codes

List of HTTP status codes returned for the query.

Code	Description
200 OK	Returns the list of resolution options.
400 Bad Request	incidentNature is missing or has a non-numeric value.
404 Not Found	Incorrect ePO - On-prem URL.
500 Internal Server Error	An error on the server side that failed the request. See the ePO - On-prem `orion.log` file for more details about the error.