Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi there,I tried posting this in the Technology and Support forums and it was marked as spam within minutes. It's been an absolute nightmare to get any clear information on the API endpoints that we're trying to access, and this community is my only ...
My developer colleague and I (detection engineer) would like to call the following API endpoint:GET/api/fmc_platform/v1/domain/{domainUUID}/audit/configchangesHowever, according to the API documentation this call requires a parameter called sn...
Update: we were successful in making the call to the /configchanges endpoint using the snapshotId attribute of the Save Policy event log. So note that the audit record id itself is not a valid snapshotId. It needs to be a snapshotId attribute that is...
Actually, upon continuing to dig, we noticed that there was a snapshotId attribute in Policy Editor Save logs (generated when a policy is saved after modification). We will be looking into passing that snapshotId to the configchanges endpoint to see ...
Hey there bigevilbeard, we tried passing auditrecords IDs as snapshotId parameters, and that did not work out. We're going to try to get a TAC case going for the logs we were unable to pull from API calls. Thank you for weighing in!Edit: we noticed a...