External feed names: Request

To retrieve the list of external feed names, send the following request:

GET https://<IA_IP_address>:<port_number>/threatintelservice/v1/feedname

Required headers:

X-Username: <user> 
X-Role: <role>

Options

IA_IP_address—The IP address of the NDR appliance running the NDR API.
port_number—The port number of the NDR appliance running the NDR API.
token—This token authenticates the session. By default, the session times out after 24 hours.
user—The user ID.
role—The user's role.

Example

GET https://xxx.xxx.xxx.xxx:443/threatintelservice/v1/feedname

Required headers:

Cookie: px=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx > 
X-Username: wheel 
X-Role: wheel

External feed names: Response

HTTP/1.1 [Response Code] [Response Message]				
Date: [Date]				
Content-Type: [Content Type]
{
  "payload": [
    {
      "active": false,
      "name": "isight",
      "error": "isight key is not valid"
    },
    {
      "active": true,
      "name": "fireeye",
      "indicators": 999,
      "matches": 99,
      "source": "file"
    },
    {
      "active": true,
      "name": "mandiant",
      "indicators": 999,
      "matches": 99,
      "source": "file"
    }
  ],
  "status": "OK"
}

Response fields

Response Code—A standard HTTP response code.
- 200—Request successful; the feed names were returned.
Response Message—A standard HTTP response message.
- OK—Request successful; the feed names were returned.
Date—Standard HTML date format.
Content Type—The response format.

Example

HTTP/1.1 200 OK				
Date: [Date]				
Content-Type: [Content Type]
{
  "payload": [
    {
      "active": false,
      "name": "isight",
      "error": "isight key is not valid"
    },
    {
      "active": true,
      "name": "fireeye",
      "indicators": 999,
      "matches": 99,
      "source": "file"
    },
    {
      "active": true,
      "name": "mandiant",
      "indicators": 999,
      "matches": 99,
      "source": "file"
    }
  ],
  "status": "OK"
}

cURL code sample: External feed names

curl -k --cookie "px=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" -H "X-Username: wheel" -H "X-Role: wheel" https://xxx.xxx.xxx.xxx:443/threatintelservice/v1/feedname

This cURL sample includes the following options:

-k—This option explicitly allows cURL to perform insecure SSL connections and transfers, which allows you to test your SSL connection without installing a CA certificate.
--cookie "px=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"—This option specifies the authentication token for this session.
-H "X-Username: wheel"—User name.
-H "X-Role: wheel"—User role.
https://xxx.xxx.xxx.xxx:443/threatintelservice/v1/feedname—The feed names request URL. Replace xxx.xxx.xxx.xxx with the IP address of your NDR appliance.

Results

This example retrieves the list of external feed names in the system.