Cohesity Helios

this connector integrates cohesity helios with swimlane turbine prerequisites the cohesity asset requires an api key capabilities this connector provides the following capabilities get helios alerts get ransomeware alerts notes https //developer cohesity com/apidocs/helios/v2 api configurations cohesity helios api key authentication authenticates using an api key configuration parameters parameter description type required url a url to the target host string required apikey api key string required verify ssl verify ssl certificate boolean optional http proxy a proxy to route requests through string optional actions get helios alerts get the list of helios alerts endpoint url v2/mcm/alerts method get input argument name type required description headers object optional http headers for the request headers regionid string optional this parameter uniquely represents a region and is used for making helios calls to a specific region parameters alertidlist array optional filter by list of alert ids parameters alertstatelist array optional filter by list of alert states parameters alerttypelist array optional filter by list of alert types parameters alertseveritylist array optional filter by list of alert severity types parameters regionids array optional filter by list of region ids parameters clusteridentifiers array optional filter by list of cluster ids parameters startdateusecs number optional specifies the start time of the alerts to be returned all the alerts returned are raised after the specified start time this value should be in unix timestamp epoch in microseconds parameters enddateusecs number optional specifies the end time of the alerts to be returned all the alerts returned are raised before the specified end time this value should be in unix timestamp epoch in microseconds parameters maxalerts number optional specifies maximum number of alerts to return parameters alertcategorylist array optional filter by list of alert categories parameters alerttypebucketlist array optional filter by list of alert type buckets parameters alertpropertykeylist array optional specifies list of the alert property keys to query parameters alertpropertyvaluelist array optional specifies list of the alert property value, multiple values for one key should be joined by ' ' input example {"headers" {"regionid" "string"},"parameters" {"alertidlist" \["string"],"alertstatelist" \["string"],"alerttypelist" \[123],"alertseveritylist" \["string"],"regionids" \["string"],"clusteridentifiers" \["string"],"startdateusecs" 123,"enddateusecs" 123,"maxalerts" 123,"alertcategorylist" \["string"],"alerttypebucketlist" \["string"],"alertpropertykeylist" \["string"],"alertpropertyvaluelist" \["string"]}} output parameter type description status code number http status code of the response reason string response reason phrase output example {"status code" 200,"response headers" {"date" "wed, 20 mar 2024 06 17 44 gmt","content type" "application/json","content length" "5","connection" "keep alive","x frame options" "sameorigin","x prisma event id" "850161ab d9e4 46ce 70f0 71f12abaa64c","content security policy" "frame ancestors 'self';","x xss protection" "1; mode=block","x content type options" "nosniff","referrer policy" "strict origin when cross origin","x download options" "noopen","x dns prefetch control" "off","strict transpor get ransomware alerts get cohesity helios ransomware alerts endpoint url mcm/alerts method get input argument name type required description headers object optional http headers for the request headers regionid string optional this parameter uniquely represents a region and is used for making helios calls to a specific region parameters alertstatelist array optional filter by list of alert states parameters alertseveritylist array optional filter by list of alert severity types parameters regionids array optional filter by list of region ids parameters clusteridentifiers array optional filter by list of cluster ids parameters startdatetime string optional start datetime in iso format parameters enddatetime string optional start datetime in iso format parameters maxalerts number optional specifies maximum number of alerts to return input example {"headers" {"regionid" "string"},"parameters" {"alertstatelist" \["string"],"alertseveritylist" \["string"],"regionids" \["string"],"clusteridentifiers" \["string"],"startdatetime" "string","enddatetime" "string","maxalerts" 123}} output parameter type description status code number http status code of the response reason string response reason phrase ransomware alerts array output field ransomware alerts ransomware alerts alert id string unique identifier ransomware alerts alert name string name of the resource ransomware alerts cluster name string name of the resource ransomware alerts occurrence time string time value ransomware alerts severity string output field ransomware alerts severity ransomware alerts alert description string output field ransomware alerts alert description ransomware alerts alert cause string output field ransomware alerts alert cause ransomware alerts anomalous object name string name of the resource ransomware alerts anomalous object env string output field ransomware alerts anomalous object env ransomware alerts anomaly strength string output field ransomware alerts anomaly strength output example {"status code" 200,"response headers" {"date" "fri, 05 apr 2024 05 50 40 gmt","content type" "application/json","transfer encoding" "chunked","connection" "keep alive","x frame options" "sameorigin","x prisma event id" "d135b113 d6b2 bbc3 a345 7b8cfe643982","content encoding" "gzip","vary" "accept encoding","content security policy" "frame ancestors 'self';","x xss protection" "1; mode=block","x content type options" "nosniff","referrer policy" "strict origin when cross origin","x download optio response headers header description example connection http response header connection keep alive content encoding http response header content encoding gzip content length the length of the response body in bytes 5 content security policy http response header content security policy frame ancestors 'self'; content type the media type of the resource application/json date the date and time at which the message was originated wed, 20 mar 2024 06 17 44 gmt feature policy http response header feature policy camera 'none';microphone 'none';geolocation 'none';encrypted media 'none';payment 'none';usb 'none'; referrer policy http response header referrer policy strict origin when cross origin strict transport security http response header strict transport security max age=31536000; includesubdomains transfer encoding http response header transfer encoding chunked vary http response header vary accept encoding x content type options http response header x content type options nosniff x dns prefetch control http response header x dns prefetch control off x download options http response header x download options noopen x frame options http response header x frame options sameorigin x prisma event id http response header x prisma event id d135b113 d6b2 bbc3 a345 7b8cfe643982 x xss protection http response header x xss protection 1; mode=block