Cisco AMP for Endpoints API

GET /v1/groups/{:group_guid}

Description

Returns a particular group. Use group_guid to get information about a particular group.

Show Response Fields

Name Type Description
version String
metadata.links.self String
data.name String
data.description String
data.guid GUID
data.source String
data.policies Array
data.policies[].name String
data.policies[].description String
data.policies[].guid GUID
data.policies[].product String
data.policies[].default Boolean
data.policies[].serial_number Integer
data.policies[].links.policy_xml String
data.policies[].links.policy String
data.policies[].file_lists Array
data.policies[].file_lists[].name String
data.policies[].file_lists[].guid GUID
data.policies[].file_lists[].type String
data.policies[].ip_lists Array
data.policies[].ip_lists[].type String
data.policies[].ip_lists[].name String
data.policies[].ip_lists[].guid GUID
data.policies[].exclusion_set.name String
data.policies[].exclusion_set.guid GUID
data.policies[].used_in_groups Array
data.policies[].used_in_groups[].name String
data.policies[].used_in_groups[].description String
data.policies[].used_in_groups[].guid GUID
data.policies[].inherited Boolean
Write
Preview

Examples

Fetch group with given group_guid

Fetch group with given group_guid

Request

Requires Authorization
GET /v1/groups/a4a983ef-91df-428f-9b08-1e88ec5357df
Headers
accept: application/json
content-type: application/json
accept-encoding: identity
authorization: Basic FILTERED

cURL Edit, then copy and paste on your terminal

curl -X GET \
-H 'accept: application/json' \
-H 'content-type: application/json' \
-H 'accept-encoding: identity' \
--compressed -H 'Accept-Encoding: gzip, deflate' \
-u YOUR_API_CLIENT_ID \
'https://api.amp.cisco.com/v1/groups/a4a983ef-91df-428f-9b08-1e88ec5357df'

Response

Shortened for readability

content-type: application/json; charset=utf-8
transfer-encoding: chunked
status: 200 OK
x-ratelimit-limit: 3000
x-ratelimit-reset: 1962
referrer-policy: strict-origin-when-cross-origin
x-ratelimit-remaining: 2799
x-permitted-cross-domain-policies: none
x-download-options: noopen
etag: W/"defd02c60e69c8b1fac81c6463410a62"
x-frame-options: SAMEORIGIN
x-ratelimit-resetdate: 2021-05-05T23:55:49Z
strict-transport-security: max-age=31536000
{
  "version": "v1.2.0",
  "metadata": {
    "links": {
      "self": "https://api.amp.cisco.com/v1/groups/a4a983ef-91df-428f-9b08-1e88ec5357df"
    }
  },
  "data": {
    "name": "00-mar25-forensic-group",
    "description": "",
    "guid": "a4a983ef-91df-428f-9b08-1e88ec5357df",
    "source": null,
    "policies": [
      {
        "name": "00-cat-forensic-mar25",
        "description": "",
        "guid": "3dc1435d-bdc8-4a9d-9da5-e7371562378d",
        "product": "windows",
        "default": false,
        "serial_number": 131,
        "links": {
          "policy_xml": "https://api.amp.cisco.com/v1/policies/3dc1435d-bdc8-4a9d-9da5-e7371562378d.xml",
          "policy": "https://api.amp.cisco.com/v1/policies/3dc1435d-bdc8-4a9d-9da5-e7371562378d"
        },
        "file_lists": [

        ],
        "ip_lists": [

        ],
        "isolation_ip_lists": [

        ],
        "exclusion_sets": [
          {
            "name": "Microsoft Windows Default",
            "guid": "9381546e-1617-46ae-98e7-f92fde16cffe"
          }
        ],
        "used_in_groups": [
          {
            "name": "Audit",
            "description": "Audit Group for FireAMP API Docs",
            "guid": "b077d6bc-bbdf-42f7-8838-a06053fbd98a"
          },
          {
            "name": "00-mar25-forensic-group",
            "description": "",
            "guid": "a4a983ef-91df-428f-9b08-1e88ec5357df"
          }
        ],
        "inherited": false
      },
      {
        "name": "Default FireAMP Android",
        "guid": "cf86e1d9-1499-41ad-82e6-7333a2ca2ab0",
        "product": "android",
        "default": true,
        "serial_number": 81,
        "links": {
          "policy_xml": "https://api.amp.cisco.com/v1/policies/cf86e1d9-1499-41ad-82e6-7333a2ca2ab0.xml",
          "policy": "https://api.amp.cisco.com/v1/policies/cf86e1d9-1499-41ad-82e6-7333a2ca2ab0"
        },
        "file_lists": [

        ],
        "ip_lists": [

        ],
        "isolation_ip_lists": [

        ],
        "used_in_groups": [
          {
            "name": "Audit",
            "description": "Audit Group for FireAMP API Docs",
            "guid": "b077d6bc-bbdf-42f7-8838-a06053fbd98a"
          },
          {
            "name": "AoVdQMjT",
            "description": "This is a new group",
            "guid": "bfe6abd0-6591-4bf2-a0d3-02efc1cd268e",
            "source": "Created via API"
          }
        ],
        "inherited": false
      }
    ]
  }
}