Page tree

The functionality of DataExport API includes the following:

  • Ability to specify the number of attributes to be included within the result: 
    • Event ID;
    • Senders: list of contacts and authentication result, taking into account the potential conflicts;
    • Recipients: list of contacts, and authentication result, taking into account the potential conflicts;
    • Sender's computer, taking into account the potential conflict;
    • Type of event;
    • Date and time of interception;
    • Protocol;
    • Level of violation;
    • Verdict;
    • Path to file or receiver address;
    • Path to file or sender address;
    • User's decision;
    • Path to file;
    • Web resource address;
    • Security objects and catalogues;
    • Event's size;
    • Tags;
    • Set of user attributes logged via plugin;
    • Set of system titles for events;
    • Date and time of event pasting into DB;
    • Name of perimeter where the event has entered;
    • Name of perimeter left by event;
    • List of policies names (including policy ID), triggered by the intercepted object;
    • Group of rules;
    • Interception server;
    • IP interception server;
    • Receiver device name;
    • Sender device name;
    • E-mail subject;
    • Attachment;
    • Mandate level;
    • Mandate category.
  • Ability to specify the number of attributes to filtrate:
    • Date and time of interception;
    • Type of event;
    • Protocol;
    • Security objects and catalogues;
    • User's decision;
    • Event's size;
    • Tags;
    • Date and time of event pasting into DB;
    • Group of rules;
    • Level of violation;
    • Verdict;
    • Data and time of the logged user action;
    • Type of the object the action applied to.
  • Getting separate event metadata being able to specify the number of attributes to be included into the result. In this regard, if the event contains few enclosed objects, all the extracted text to be assembled into one file;
  • Getting all the extracted text of an event;
  • Getting a full list of system titles;
  • Getting binary data of a separate event;
  • Getting the list of the Management Console users;
  • Retrieving user audit data:
    • Record ID in auditing Console user sessions;
    • Data and time of the logged user action in UTC;
    • ID of the user who performed the action;
    • Full name of the user who performed the action;
    • Type of the action the user has taken;
    • Type of the object the action applied to;
    • ID of the object the action applied to;
    • Name of the object the action applied to;
    • Description of changes with old and new values.
  • No labels