Get Incident Correlations

description retrieve correlations for a specified incident in symantec dlp using the unique identifier provided endpoint url /protectmanager/webservices/v2/incidents/{{id}}/correlations method get inputs path parameters (object) – required id (number) – required the incident id output example \[ { "status code" 200, "response headers" {}, "reason" "ok", "json body" \[ { "variable" "incident sender", "label" "sender", "correlationvalues" \[ { "value" "janedoe\@gmail com", "countsevendays" 0, "countthirtydays" 0, "countalldays" 24 } ] }, { "variable" "incident recipient", "label" "recipient", "correlationvalues" \[ { "value" "bobdoe\@gmail com", "countsevendays" 0, "countthirtydays" 0, "countalldays" 24 } ] }, { "variable" "incident message subject", "label" "subject", "correlationvalues" \[ { "value" "secret", "countsevendays" 0, "countthirtydays" 0, "countalldays" 24 } ] }, { "variable" "incident policy id", "label" "policy", "correlationvalues" \[ { "value" "1", "label" "secret policy", "countsevendays" 0, "countthirtydays" 0, "countalldays" 24 } ] } ] } ] output parameters status code (number) reason (string) json body (array) variable (string) label (string) correlationvalues (array) value (string) label (string) countsevendays (number) countthirtydays (number) countalldays (number)