ListFileProtectRule - Security Center - Alibaba Cloud Documentation Center

Queries core file monitoring rules.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

Debug

Authorization information

There is currently no authorization information disclosed in the API.

Request parameters

Parameter	Type	Required	Description	Example
PageSize	integer	No	The number of entries per page.	10
CurrentPage	integer	No	The page number.	1
RuleName	string	No	The name of the rule.	test-rule-1
AlertLevel	integer	No	The severity of alerts. Valid values: 0: does not generate alerts 1: sends notifications 2: suspicious 3: high-risk	0
RuleAction	string	No	The handling method of the rule. Valid values: pass: allow alert	pass

Response parameters

Parameter	Type	Description	Example
	object
RequestId	string	The request ID.	FBBEB173-1F43-505F-A876-C03ECDF6CE4C
PageInfo	object	The pagination information.
CurrentPage	integer	The page number.	1
PageSize	integer	The number of entries per page.	20
TotalCount	integer	The total number of entries returned.	253
FileProtectList	object []	The details of returned data.
Status	integer	The status of the rule. Valid values: 0: disabled 1: enabled	1
AlertLevel	string	The severity of alerts. Valid values: 0: does not generate alerts 1: sends notifications 2: suspicious 3: high-risk	0
SwitchId	string	The switch ID of the rule.	FILE_PROTECT_RULE_SWITCH_TYPE_1693474122927
Id	long	The ID of the rule.	1412511
FileOps	array	The operations performed on the files.
	string	The operation performed on the file. Valid values: WRITE READ DELETE RENAME CHMOD: change permissions	READ
Action	string	The handling method of the rule. Valid values: pass: allow alert	pass
FilePaths	array	The paths to the monitored files. Wildcard characters are supported.
	string	The path to the monitored file.	/usr/*
ProcPaths	array	The paths to the monitored processes. Wildcard characters are supported.
	string	The path to the monitored process.	/usr/local/*
RuleName	string	The name of the rule.	test11
GmtCreate	long	The time when the rule was created.	1682304179000
GmtModified	long	The time when the rule was last modified.	1682304179000
EffectInstanceCount	long	The total number of affected assets.	12

Examples

Sample success responses

JSONformat

{
  "RequestId": "FBBEB173-1F43-505F-A876-C03ECDF6CE4C",
  "PageInfo": {
    "CurrentPage": 1,
    "PageSize": 20,
    "TotalCount": 253
  },
  "FileProtectList": [
    {
      "Status": 1,
      "AlertLevel": "0",
      "SwitchId": "FILE_PROTECT_RULE_SWITCH_TYPE_1693474122927",
      "Id": 1412511,
      "FileOps": [
        "READ"
      ],
      "Action": "pass",
      "FilePaths": [
        "/usr/*"
      ],
      "ProcPaths": [
        "/usr/local/*"
      ],
      "RuleName": "test11",
      "GmtCreate": 1682304179000,
      "GmtModified": 1682304179000,
      "EffectInstanceCount": 12
    }
  ]
}

Error codes

HTTP status code	Error code	Error message	Description
403	NoPermission	caller has no permission	You are not authorized to do this operation.
500	ServerError	ServerError	-

For a list of error codes, visit the Service error codes.