You can use the triage bundle requests to initiate the creation of a triage package for a specific alert, check its status, and download the package from the respective product bundle.
Note
These requests requires the alert UUID. These APIs are supported for the following products from version 11.0.0 and later.
Central Management System
Malware Analysis
Email Security — Server
File Protect
Network Security
You can perform the following actions:
Error handling
If the API is executed with an invalid alert UUID, a 400 error message is returned.
Example request
curl -qgsSk --no-progress-bar \ --header "X-FeApi-Token: <token>" \ -XPOST \ "https://<cms_ip>/wsapis/v2.0.0/alerts/alert/486b2853-5727-4a72-ba8a-312863e42/triage_pkg"
Example error response
{
"status_code": 400,
"message": "Invalid Alert Uuid"
}