actions_file_retrieval_details
Obtain file retrieval details by providing the group action ID from a Retrieve File API response. Use the returned download API to fetch and unzip the file.
Instructions
File Retrieval Details
View the API required to call in order to download the file retrieved by the Retrieve File API request according to the action ID.
The response contains a file hash you need to download and then unzip to view:
Download the file.
curl -XPOST "https://api-{fqdn}/public_api/v1/download/<api_value>"
-H "x-xdr-auth-id:{API_KEY_ID}"
-H "Authorization:{API_KEY}"
-H 'Content-Type:application/json'
--output /tmp/file.zipUnzip the file:
unzip /tmp/file.zip
Required license: Cortex XSIAM Premium or Cortex XSIAM Enterprise or Cortex XSIAM Enterprise Plus
[POST /public_api/v1/actions/file_retrieval_details] · Response Action
Example request body:
{
"request_data": {
"group_action_id": "<action ID>"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| request_data | Yes | A dictionary containing the API request fields. |