Get Policy Matches

description retrieve detailed policy violation information for a given incident id in symantec dlp endpoint url /protectmanager/webservices/v2/incidents/{{id}}/policymatches method get inputs path parameters (object) – required id (number) – required the incident id output example \[ { "status code" 200, "response headers" {}, "reason" "ok", "json body" { "violatedrules" \[ { "rulename" "symantec", "ruletypei18nkey" "keyword name", "matches" 3 } ], "policyname" "symantec", "otherpoliciesviolated" \[ { "policyid" 28476, "incidentid" 2147525031, "policyname" "blockbatnewdlpkeywords", "preventorprotectstatusid" 0 }, { "policyid" 28314, "incidentid" 2147525029, "policyname" "ep block", "preventorprotectstatusid" 0 }, { "policyid" 28355, "incidentid" 2147525030, "policyname" "qurantine edar policy", "preventorprotectstatusid" 0 }, { "policyid" 27991, "incidentid" 2147525032, "policyname" "secret policy", "preventorprotectstatusid" 0 } ], "matches" 3 } } ] output parameters status code (number) reason (string) json body (object) violatedrules (array) rulename (string) ruletypei18nkey (string) matches (number) policyname (string) otherpoliciesviolated (array) policyid (number) incidentid (number) policyname (string) preventorprotectstatusid (number) matches (number)