Policy Collections
Primary Policy and Policy Profile collections:
/api/policies
/api/policy_profiles
With Policy Profiles being sets of Policies with the ability to query policies of a specific policy profile via:
GET /api/policy_profiles/:id?expand=policies
Or just the subcollection:
GET /api/policy_profiles/:id/policies
Policy Actions
Policy actions can be queried as a primary collection or as a subcollection of policies as follows:
GET /api/policy_actions
GET /api/policies/:id?expand=policy_actions
or simply the subcollection:
GET /api/policies/:id/policy_actions
In this example, we’re expanding all policy actions
GET /api/policy_actions?expand=resources
Response:
{
"name": "policy_actions",
"count": 33,
"subcount": 33,
"resources": [
{
"href": "http://localhost:3000/api/policy_actions/1",
"id": "1",
"name": "audit",
"description": "Generate Audit Event",
"created_on": "2014-11-20T19:10:05Z",
"updated_on": "2014-11-20T19:10:05Z",
"guid": "d619567a-70e8-11e4-a5b4-b8e85646e742",
"action_type": "default",
"options": {
}
},
{
"href": "http://localhost:3000/api/policy_actions/2",
"id": "2",
"name": "log",
"description": "Generate log message",
"created_on": "2014-11-20T19:10:05Z",
"updated_on": "2014-11-20T19:10:05Z",
"guid": "d61c3be2-70e8-11e4-a5b4-b8e85646e742",
"action_type": "default",
"options": {
}
},
{
"href": "http://localhost:3000/api/policy_actions/3",
"id": "3",
"name": "evm_event",
"description": "Show EVM Event on Timeline",
"created_on": "2014-11-20T19:10:05Z",
"updated_on": "2014-11-20T19:10:05Z",
"guid": "d61cb05e-70e8-11e4-a5b4-b8e85646e742",
"action_type": "default",
"options": {
}
},
{
"href": "http://localhost:3000/api/policy_actions/4",
"id": "4",
"name": "script",
"description": "Execute an external script",
"created_on": "2014-11-20T19:10:05Z",
"updated_on": "2014-11-20T19:10:05Z",
"guid": "d61d225a-70e8-11e4-a5b4-b8e85646e742",
"action_type": "default",
"options": {
}
},
...
]
}
Policy Conditions
Policy conditions can be queried as a primary collection or as a subcollection of policies as follows:
GET /api/conditions
GET /api/policies/:id?expand=conditions
or simply the subcollection:
GET /api/policies/:id/conditions
In this example, we’re expanding the conditions of a policy:
GET /api/policies/10?expand=conditions
Response:
{
"href": "http://localhost:3000/api/policies/10",
"id": "10",
"name": "85dd1f68-ae53-11e4-9c45-b8e85646e742",
"description": "web_server_policy",
"created_on": "2015-02-06T22:57:27Z",
"updated_on": "2015-04-09T13:20:58Z",
"towhat": "Vm",
"guid": "85dd1f68-ae53-11e4-9c45-b8e85646e742",
"created_by": "admin",
"updated_by": "admin",
"active": true,
"mode": "control",
"conditions": [
{
"href": "http://localhost:3000/api/policies/10/conditions/1",
"id": "1",
"name": "fe75d0bc-860f-11e4-b12d-b8e85646e742",
"description": "Memory For Web Server",
"modifier": "allow",
"expression": {
"exp": {
">=": {
"field": "Vm-num_cpu",
"value": "2"
}
},
"context_type": null
},
"towhat": "Vm",
"created_on": "2014-12-17T17:13:17Z",
"updated_on": "2015-02-08T15:16:16Z",
"guid": "fe75d0bc-860f-11e4-b12d-b8e85646e742"
}
]
}
Policy Events
Policy events can be queried as a primary collection or as a subcollection of policies as follows:
GET /api/events
GET /api/policies/:id?expand=events
or simply the subcollection:
GET /api/policies/:id/events
In this example, we’re expanding all policy events
GET /api/events?expand=resources
Response:
{
"name": "events",
"count": 121,
"subcount": 121,
"resources": [
{
"href": "http://localhost:3000/api/events/1",
"id": "1",
"name": "evm_server_start",
"description": "EVM Server Start",
"created_on": "2014-11-20T19:10:11Z",
"updated_on": "2014-11-20T19:10:11Z",
"guid": "d9edd528-70e8-11e4-a5b4-b8e85646e742",
"event_type": "Default"
},
{
"href": "http://localhost:3000/api/events/2",
"id": "2",
"name": "evm_server_stop",
"description": "EVM Server Stop",
"created_on": "2014-11-20T19:10:11Z",
"updated_on": "2014-11-20T19:10:11Z",
"guid": "d9f44c00-70e8-11e4-a5b4-b8e85646e742",
"event_type": "Default"
},
{
"href": "http://localhost:3000/api/events/3",
"id": "3",
"name": "evm_server_not_responding",
"description": "EVM Server Not Responding",
"created_on": "2014-11-20T19:10:11Z",
"updated_on": "2014-11-20T19:10:11Z",
"guid": "d9f5dcaa-70e8-11e4-a5b4-b8e85646e742",
"event_type": "Default"
},
...
]
}