The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Request parameters

Prev Next

Use the query parameters to return the incident details.

Headers

Parameter name

Description

Required

Values

Authorization

User credentials for ePO - On-prem.

Required

Accept

Format of the data to be returned.

Optional

The default value is application/json.

incidentNature={n}

Incidents generated for data-in-use/motion and data-at-rest can have the same incident IDs. Specify n to differentiate the incident nature. Based on the data vectors, {n} can be:

  • 1 = Retrieve incident details generated for data-in-use/motion

  • 2 = Reserved to retrieve data-at-rest - Endpoint Discovery incidents and can be used when support for Endpoint Discovery custom attributes is added into the product

  • 3 = Retrieve incident details generated for data-at-rest - Network

Required

Number

Sample GET request URL

https://172.27.108.53:8443/rest/dlp/incidents/18?incidentNature=1

Sample cURL command

curl -k -v -X GET 'https://ePO-url:ePO-port/rest/dlp/incidents/18?incidentNature=1' -u '<user>:<password>'