Queries the trace information about alerts.
Debugging
Authorization information
There is currently no authorization information disclosed in the API.
Request parameters
Parameter | Type | Required | Description | Example |
---|---|---|---|---|
SourceIp | string | No | The source IP address of the request. The value of this parameter is specified by the system. | 127.0.0.1 |
Lang | string | No | The language of the content within the request and response. Valid values:
| zh |
VertexId | string | Yes | The ID of the vertex. You can call the DescribeSuspEvents operation to query the ID. | cce1d28dxxxxxxxxxxxxxxxx |
Uuid | string | Yes | The UUID of the server. | 1627f2d7-aaa2-4ed1-b07a-xxxxxxxxxxxxxx |
Type | string | Yes | The type of the vertex. Set the value to SAS_INCIDENT. | SAS_INCIDENT |
From | string | Yes | The ID of the request source. Set the value to sas. | sas |
IncidentTime | long | No | The timestamp of the detection. Unit: milliseconds. | 1670555392000 |
Response parameters
Examples
Sample success responses
JSON
format
{
"Success": true,
"RequestId": "24A20733-10A0-4AF6-BE6B-XXXXXXXXX",
"TraceInfoDetail": {
"EdgeList": [
{
"Type": "trigger_file_alert",
"Time": "2022-12-21 10:24:42",
"StartId": "02b4bf933c8e3bb8b9465eee502xxxxx",
"Count": 1,
"EndId": "a1d1fa39e5345dcef3f9712172cxxxxx"
}
],
"VertexList": [
{
"Type": "file_path",
"Time": "2022-12-21 10:24:42",
"Name": "/usr/local/tomcat",
"Id": "a1d1fa39e5345dcef3f9712172xxxxxx",
"Count": 1,
"NeighborList": [
{
"Type": "alert",
"HasMore": true,
"Count": 1
}
]
}
],
"EntityTypeList": [
{
"DisplayColor": "#fff",
"DbId": 0,
"DisplayTemplate": "[{\"name\":\"${logtime}\",\"value\":\"$!{time}\"}]",
"DisplayIcon": "https://img.alicdn.com/tfs/TB176P5OgDqK1RjSZSyXXaxEVXa-49-48.png",
"Limit": 0,
"GmtCreate": 0,
"Offset": 0,
"Namespace": "*",
"Name": "Alert",
"GmtModified": 0,
"Id": "Alert"
}
],
"RelationTypeList": [
{
"ShowType": "Deprecated",
"DisplayColor": "#fff",
"Name": "file",
"Directed": 1,
"RelationTypeId": "netflow_to_process"
}
]
}
}
Error codes
HTTP status code | Error code | Error message | Description |
---|---|---|---|
403 | NoPermission | caller has no permission | You are not authorized to do this operation. |
500 | ServerError | ServerError | - |
For a list of error codes, visit the Service error codes.
Change history
Change time | Summary of changes | Operation |
---|
No change history