Cisco AMP for Endpoints API

GET /v1/computers/{:connector_guid}/user_trajectory

Description

Query Parameters

Name Type Example Values Description
q String johndoe
limit Integer 5

Show Response Fields

Name Type Description
version String
metadata.links.self String
errors Array
errors[].error_code Integer
errors[].description String
errors[].details Array
errors[].details[] String
Write
Preview

Examples

Fetch a specific computer's trajectory with given connector_guid and filter for events with user ...

Fetch a specific computer's trajectory with given connector_guid and filter for events with user name activity

Request

Requires Authorization
GET /v1/computers//user_trajectory?q=johndoe&limit=5
Headers
accept: application/json
content-type: application/json
authorization: Basic FILTERED

cURL Edit, then copy and paste on your terminal

curl -X GET \
-H 'accept: application/json' \
-H 'content-type: application/json' \
--compressed -H 'Accept-Encoding: gzip, deflate' \
-u YOUR_API_CLIENT_ID \
'https://api.eu.amp.cisco.com/v1/computers//user_trajectory?q=johndoe&limit=5'

Response

Shortened for readability

strict-transport-security: max-age=31536000
content-type: application/json; charset=utf-8
status: 400 Bad Request
x-ratelimit-limit: 3000
x-ratelimit-reset: 3573
x-ratelimit-remaining: 2959
x-frame-options: SAMEORIGIN
x-ratelimit-resetdate: 2019-04-02T22:41:15Z
transfer-encoding: chunked
{
  "version": "v1.2.0",
  "metadata": {
    "links": {
      "self": "https://api.eu.amp.cisco.com/v1/computers/user_trajectory?q=johndoe&limit=5"
    }
  },
  "data": {
  },
  "errors": [
    {
      "error_code": 400,
      "description": "Bad Request",
      "details": [
        "connector_guid must be in the correct guid format [XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX]: user_trajectory"
      ]
    }
  ]
}