IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Regarding risk_events and cases endpoint filters

    Posted Tue July 09, 2024 02:07 PM

    • The risk_events endpoint (https://guardium.security.ibm.com/api/v3/risk_events?status=OPENED) has two filters, date_from and date_to. However, when we use date and time in the specified format, the output is not as expected.
    • The cases endpoint (https://guardium.security.ibm.com/api/v3/cases?offset=2&limit=2) has two filters, offset and limit. Both parameters are not working as intended according to the offset and limit concept.


    ------------------------------
    Deep Kothadiya
    ------------------------------


  • 2.  RE: Regarding risk_events and cases endpoint filters

    Posted Wed July 10, 2024 04:53 AM

    This is an external forum for customers. Please remove this post and contact the development team through appropriate channels. 



    ------------------------------
    MIRI LEVY
    ------------------------------



  • 3.  RE: Regarding risk_events and cases endpoint filters

    Posted Thu July 25, 2024 09:54 AM

    Hi Deep

    Per your first point the result you get for your query is as expected.

    Your filters are from_date=2024-07-05 08:00:00 date_to= 2024-07-07 08:00:00 

    The result is a risk event that started at 2024-07-05 09:00:00 and ended at 2024-07-08 08:00:00

    This event was active within the period you query about.

    To illustrate this consider a query Q with date_from=t1 and date_to=t2

                        t1                           t2

    Q    --------|-------------------|------------

    E1        |------------|

    E2                      |---------|

    E3                   |------------------------|

    E4        |-------------------------------|

    All the events E1-E4 are active between t1 and t2 and thus all are valid results to the query

    I hope this makes sense to you

    I will forward your other question to the right person

    Guy Gali



    ------------------------------
    GUY GALIL
    ------------------------------



  • 4.  RE: Regarding risk_events and cases endpoint filters

    Posted Mon July 29, 2024 06:35 PM

    @Deep Kothadiya 

    Thank you for reporting the bug:


    The cases endpoint (https://guardium.security.ibm.com/api/v3/cases?offset=2&limit=2) has two filters, offset and limit. Both parameters are not working as intended according to the offset and limit concept.

    We will fix this in a future release.



    ------------------------------
    Dan Gurney
    ------------------------------