Alert Entity Details
Get details about an entity associated with a given alert ID for which additional context is available by invoking the following endpoint:
GET https://YourAccount.lacework.net/api/v2/Alerts/EntityDetails/{alertId}?contextEntityType={entityType}&entityValue={entityValue}
You must specify a contextEntityType and entityValue. (Currently, additional context support is available for IpAddress entities only, so contextEntityType must be Machine or IpAddress.) If any item of information about this entity is not available, partial information is returned.
Path parameters
Alert ID
Query parameters
You must specify a context entity type from the available options. (Currently, only Machine and IpAddress is available.)
You must specify a context entity value, such as the Machine identifier (MID) or IP address.
Headers
Bearer Access Token. For example, "Bearer {YourAPIToken}"
application/json
Response
Alert Entity Details