findIncidentsByIndicators

Active incidents already covering any of the given indicator values (duplicate guard).

Examples

query FindIncidentsByIndicators($values: [String!]!) {
  findIncidentsByIndicators(values: $values) {
    caseId
    name
    status
    matchedValue
  }
}

Variables

This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.

{
  "values": ["example"]
}

curl -X POST \
https://api.cloud.ox.security/api/apollo-gateway \
-H 'Content-Type: application/json' \
-H 'Authorization: YOUR_API_TOKEN' \
-d '{
 "query": "query FindIncidentsByIndicators($values: [String!]!) { findIncidentsByIndicators(values: $values) { caseId name status matchedValue } }",
 "variables": {
    "values": ["example"]
  }
}'

const query = 'query FindIncidentsByIndicators($values: [String!]!) { findIncidentsByIndicators(values: $values) { caseId name status matchedValue } }';

fetch("https://api.cloud.ox.security/api/apollo-gateway", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "YOUR_API_TOKEN"
  },
  body: JSON.stringify({
    query: query,
    // This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.
    variables: {
      values: ["example"]
    }
  })
})
.then(response => response.json())
.then(result => console.log(JSON.stringify(result, null, 2)))
.catch(error => console.error('Error:', error));

import requests

query = 'query FindIncidentsByIndicators($values: [String!]!) { findIncidentsByIndicators(values: $values) { caseId name status matchedValue } }'

response = requests.post(
  "https://api.cloud.ox.security/api/apollo-gateway",
  headers={
    "Content-Type": "application/json",
    "Authorization": "YOUR_API_TOKEN"
  },
  json={
    "query": query,
    # This is an example input showing all available input fields. Only fields marked as required in the schema are mandatory.
    "variables": {
      "values": ["example"]
    }
  }
)

if response.status_code == 200:
    result = response.json()
    print(result)
else:
    print(f"Error: {response.status_code}")
    print(response.text)

Arguments

You can use the following argument(s) to customize your findIncidentsByIndicators query.

Argument

Description

Supported fields

values [String!]! required

Fields

Return type: [IncidentMatch!]!

You can use the following field(s) to specify what information your findIncidentsByIndicators query will return. Please note that some fields may have their own subfields.

Field

Description

Supported fields

caseId String!

name String!

status IncidentStatus!

matchedValue String!

Last updated 5 days ago