Per-system patch details
threats_system_report_patchesRetrieve systems with per-system patch details including status, approval, install errors, and installed time. Supports extensive filtering and pagination for targeted patch management queries.
Instructions
Retrieves systems with their per-system patch details (status Missing/Failed/Installed, approval status, install errors, installed time). Each record is one system (resource_id) with a nested patches array. Supports extensive filtering and pagination.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| raw | No | Return the full, unprojected record for each entry instead of the curated default field set. | |
| page | No | Page number to retrieve. Default is 1. | |
| cveIds | No | Filter by CVE ID, e.g. "CVE-2019-0981". | |
| patchId | No | Filter by patch ID — numeric ID or comma-separated list. | |
| fqdnName | No | Filter by the system's fully qualified domain name. | |
| severity | No | Filter by patch severity. Known values: Critical, Important, Moderate, Low, Unrated. | |
| pageLimit | No | Max records per page (server cap for this endpoint is 500). | |
| patchName | No | Filter to systems having patches whose name contains this text. | |
| resourceId | No | Filter by resource ID — a numeric ID or comma-separated list, e.g. "304" or "304,305". | |
| updateType | No | Filter by the type of patch (the spec's closed 'Applicable inputs' list). | |
| vendorName | No | Filter by vendor name, e.g. Microsoft. | |
| patchStatus | No | Filter by per-system patch status: Missing, Failed, or Installed. | |
| platformName | No | Filter by platform, e.g. Windows, Mac, Linux. | |
| installedTime | No | Filter by the patch installation time, as epoch milliseconds (e.g. "1704363395117"). | |
| rebootRequired | No | Filter by the post-deployment reboot option configured for the patch. | |
| installErrorCode | No | Filter by the patch installation error code. | |
| patchDescription | No | Filter to patches whose description contains this text. | |
| patchReleasedTime | No | Filter by the patch's release date, as epoch milliseconds (e.g. "1704363395117"). | |
| patchApprovalStatus | No | Filter by patch approval status: Approved or Unapproved. |