List All Integrations
Returns all your integrations, optionally filtered by type.
This request supports integrations with only the following:
- Okta
- Qualys
- Tenable
Query Parameters
- type string
Include only Okta, Tenable, and Qualys integrations
- 200
successful operation
- application/json; charset=UTF-8
- Schema
- Example (from schema)
Schema
- Array [
alertRules object[]
Alert Rules
Array [alertRuleNotificationConfig object[]
List of data for notifications to third-party tools
Array [dayOfMonth int32Day of month
daysOfWeek object[]
Days of week
Array [day stringPossible values: [
SU
,MO
,TU
,WE
,TH
,FR
,SA
]offset int32]detailedReport booleanProvide csv detailed report
enabled booleanScan enabled
frequency stringPossible values: [
as_it_happens
,daily
,weekly
,monthly
]frequencyFromRRule stringFrequency from RRule
hourOfDay int32Hour of day
id stringAlert rule notification config ID
includeRemediation booleanInclude remediation in detailed report
lastUpdated int64Last Updated
last_sent_ts int64Time of last notification in milliseconds
recipients string[]- For email notifications: List of unique email addresses to notify
- For integrations without notification templates: List of integration ids
- For integrations with notification templates: List of notification template ids
rruleSchedule stringtemplateId stringTemplate ID
timezone stringJava time zone ID (e.g. America/Los_Angeles)
type stringPossible values: [
email
,slack
,splunk
,amazon_sqs
,jira
,microsoft_teams
,webhook
,aws_security_hub
,google_cscc
,service_now
,pager_duty
,azure_service_bus_queue
,demisto
,aws_s3
,snowflake
]Integration type
withCompression booleanCompress detailed report
]allowAutoRemediate booleanAllow Auto-Remediation
delayNotificationMs int64Delay notifications by the specified milliseconds
description stringRule/Scan description
enabled booleanRule/Scan is enabled
lastModifiedBy stringLast modified by
lastModifiedOn int64Last modified on this date/time in milliseconds
name string requiredRule/Scan name
notifyOnDismissed booleaninclude dismissed alerts in notification
notifyOnOpen booleaninclude open alerts in notification
notifyOnResolved booleaninclude resolved alerts in notification
notifyOnSnoozed booleaninclude snoozed alerts in notification
policies string[]List of specific policies to scan
policyLabels string[]Policy labels
policyScanConfigId stringPolicy Scan Config ID
scanAll booleanScan all policies
target object
Model for Target Filter
accountGroups string[]List of Account group(s)
alertRulePolicyFilter object
Model for Alert Rule Policy Filter
availablePolicyFilters string[]List of available Alert Rule Policy Filters
cloud.type string[]Possible values: [
ALL
,AWS
,AZURE
,GCP
,ALIBABA_CLOUD
,OCI
,IBM
]Cloud Type Filter
policy.complianceStandard string[]Compliance Standard Filter
policy.label string[]Policy Label Filter
policy.severity string[]Policy Severity Filter
excludedAccounts string[]List of excluded accounts
includedResourceLists object
Model for holding the lists resource list ids by resource list type
computeAccessGroupIds string[]regions string[]List of regions for which alerts will be triggered for account groups. Alerts not associated with specific regions will be triggered regardless of listed regions. If no regions are specified, then the alerts will be triggered for all regions.
tags object[]
List of TargetTag models (resource tags) for which alerts should be triggered
Array [key stringResource tag target
values string[]List of value(s) for resource tag key
]]- createdBy string
Created by
- createdTs int64
Creation timestamp in milliseconds
- description string
Integration description
- enabled boolean
true = Enabled
- id string
Integration ID
integrationConfig object
Integration Configuration. The values depend on the integration type.
property name*
object- integrationType string
Possible values: [
EMAIL
,SLACK
,SPLUNK
,AMAZON_SQS
,WEBHOOK
,MICROSOFT_TEAMS
,AZURE_SERVICE_BUS_QUEUE
,JIRA
,SERVICE_NOW
,PAGER_DUTY
,DEMISTO
,AWS_S3
,SNOWFLAKE
,TENABLE
,QUALYS
,AZURE_SECURITY_CENTER
,GOOGLE_CSCC
,AWS_SECURITY_HUB
,OKTA_IDP
]Integration type
- lastModifiedBy string
Last modified by
- lastModifiedTs int64
Last modification timestamp in milliseconds
- name string
Integration name
reason object
Model for Integration Status Details
details object
Model for Message Details
i18nKey stringInternationalization key
statusCode int32Status code
subject stringSubject
errorType stringPossible values: [
INVALID_CONFIG
,TRANSLATION_EXCEPTION
,INVALID_TEMPLATE_CONFIG
,HTTP_EXCEPTION
,OTHERS
,TEST
]Error type
lastUpdated int64Last updated
message stringMessage
- status string
Possible values: [
GREEN
,RED
,YELLOW
,NA
]State of integration
- valid boolean
true = Is valid
- ]
[
{
"alertRules": [
{
"alertRuleNotificationConfig": [
{
"dayOfMonth": 0,
"daysOfWeek": [
{
"day": "SU",
"offset": 0
}
],
"detailedReport": true,
"enabled": true,
"frequency": "as_it_happens",
"frequencyFromRRule": "string",
"hourOfDay": 0,
"id": "string",
"includeRemediation": true,
"lastUpdated": 0,
"last_sent_ts": 0,
"recipients": [
"string"
],
"rruleSchedule": "string",
"templateId": "string",
"timezone": "string",
"type": "email",
"withCompression": true
}
],
"allowAutoRemediate": true,
"delayNotificationMs": 0,
"description": "string",
"enabled": true,
"lastModifiedBy": "string",
"lastModifiedOn": 0,
"name": "string",
"notifyOnDismissed": true,
"notifyOnOpen": true,
"notifyOnResolved": true,
"notifyOnSnoozed": true,
"policies": [
"string"
],
"policyLabels": [
"string"
],
"policyScanConfigId": "string",
"scanAll": true,
"target": {
"accountGroups": [
"string"
],
"alertRulePolicyFilter": {
"availablePolicyFilters": [
"string"
],
"cloud.type": [
"ALL"
],
"policy.complianceStandard": [
"string"
],
"policy.label": [
"string"
],
"policy.severity": [
"string"
]
},
"excludedAccounts": [
"string"
],
"includedResourceLists": {
"computeAccessGroupIds": [
"string"
]
},
"regions": [
"string"
],
"tags": [
{
"key": "string",
"values": [
"string"
]
}
]
}
}
],
"createdBy": "string",
"createdTs": 0,
"description": "string",
"enabled": true,
"id": "string",
"integrationConfig": {},
"integrationType": "EMAIL",
"lastModifiedBy": "string",
"lastModifiedTs": 0,
"name": "string",
"reason": {
"details": {
"i18nKey": "string",
"statusCode": 0,
"subject": "string"
},
"errorType": "INVALID_CONFIG",
"lastUpdated": 0,
"message": "string"
},
"status": "GREEN",
"valid": true
}
]