Forcepoint DLP REST API Guide

Home
REST APIs
This chapter provides detailed information about the specific REST APIs available in Forcepoint DLP.
Incident Management APIs
Incident Management APIs can be used to get a list of DLP and Discovery incidents from Forcepoint DLP or update and remediate those incidents.
Update Incidents API
POST https://<DLP Manager IP>:<DLP Manager port>/dlp/rest/v1/incidents/ update
Input parameters for the Update Incidents API
Input parameters for the update incidents API mentioned in the below table.

Introduction
Authentication
Before you can connect to the Forcepoint DLP REST APIs, you need to create a new Application administrator in the Forcepoint Security Manager to create the username and password for authentication to be used in order to get a JSON Web Token (JWT) that allows you to send API requests.
REST APIs
This chapter provides detailed information about the specific REST APIs available in Forcepoint DLP.
- Incident Management APIs
  Incident Management APIs can be used to get a list of DLP and Discovery incidents from Forcepoint DLP or update and remediate those incidents.
  - Get Incidents API
    POST https://<DLP Manager IP>:<DLP Manager port>/dlp/rest/v1/incidents
  - Update Incidents API
    POST https://<DLP Manager IP>:<DLP Manager port>/dlp/rest/v1/incidents/ update
    - Header parameters for the Update Incidents API
    - Input parameters for the Update Incidents API
      Input parameters for the update incidents API mentioned in the below table.
      - Root parameters
      - Object properties for incident_keys
    - Request examples for the Update Incidents API
    - Response output for the Update Incidents API
    - Response example for the Update Incidents API
    - Status and error codes for the Update Incidents API
- Policy Management APIs
  Policy management APIs can be used to manage DLP and Discovery policies, rules and resources. These APIs support programmatic policy changes and support policy export/import use cases across the same versions of management servers.
- Deploy APIs
  Deploy APIs can be used to extract data and configure it to Policy Engine and Endpoint servers.
- Troubleshooting

Input parameters for the Update Incidents API

Input parameters for the update incidents API mentioned in the below table.

Root parameters
Object properties for incident_keys

Copyright © 2023 Forcepoint LLC