按告警 ID 列表或筛选条件创建 RASP 告警异步导出任务；接口立即返回 Result.FileName，不直接返回文件流。可通过 GetDownloadStatus 或 ListExportFileJob 查询生成状态，完成后调用 CommonDownloadFile 下载；时间字段为秒级 Unix 时间戳。

调试 #

请求参数 #

下表仅列出该接口特有的请求参数和部分公共参数。更多信息请见公共参数。

返回参数 #

下表仅列出本接口特有的返回参数。更多信息请参见返回结构。

请求示例 #

POST /?Action=ExportAlarmListDataForRasp&Version=2024-05-08 HTTP/1.1
Host: seccenter.volcengineapi.com
Content-Type: application/json; charset=UTF-8
X-Date: 20241120T080538Z
X-Content-Sha256: 287e874e******d653b44d21e
Authorization: HMAC-SHA256 Credential=Adfks******wekfwe/20241120/cn-beijing/seccenter/request, SignedHeaders=host;x-content-sha256;x-date, Signature=47a7d934ff7b37c03938******cd7b8278a40a1057690c401e92246a0e41085f

{
  "AlarmIDList": [
    "alarm-id-001",
    "alarm-id-002"
  ],
  "Conditions": {
    "AgentGroup": "production-hosts",
    "AgentGroupList": [
      "production"
    ],
    "AgentID": "agent-id-001",
    "AgentIDList": [
      "agent-id-001"
    ],
    "AgentTags": [
      "production"
    ],
    "AlarmHandleResultList": [
      1,
      2
    ],
    "AlarmID": "alarm-id-001",
    "AlertTags": [
      "production"
    ],
    "CloudProviders": [
      "volcengine"
    ],
    "ClusterID": "cluster-id-001",
    "ClusterName": "example-name",
    "ClusterRegion": "cn-beijing",
    "ClusterTags": [
      "production"
    ],
    "ContainerID": "container-id-001",
    "ContainerName": "example-name",
    "EventID": "event-id-001",
    "EventName": "example-name",
    "EventReason": "example description",
    "Exe": "/usr/bin/bash",
    "FileHash": "d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2",
    "FilePath": "/var/log/example.log",
    "Hostname": "host-001",
    "IP": "192.0.2.10",
    "ImageName": "example-name",
    "LastAlarmTimeEnd": 1786579199,
    "LastAlarmTimeStart": 1786492800,
    "LeafGroupIDs": [
      "group-id-101",
      "group-id-102"
    ],
    "Level": [
      "high",
      "medium"
    ],
    "MlpInstanceID": "mlp-instance-id-001",
    "Name": "example-name",
    "OperationList": [
      "write"
    ],
    "ProbeHook": "java.lang.Runtime.exec",
    "RaspArgv": "ls -la",
    "Status": [
      0,
      1
    ],
    "Tags": [
      "production"
    ],
    "TaskID": "task-id-001",
    "TimeEnd": 1786579199,
    "TimeStart": 1786492800,
    "TopGroupID": "group-id-001",
    "Type": [
      "hids"
    ],
    "VirusType": "Webshell",
    "WhiteListID": "whitelist-id-001",
    "WhiteListName": "example-name",
    "security_intelligence_results": [
      "malicious"
    ]
  }
}

返回示例 #

{
  "ResponseMetadata": {
    "RequestId": "20241120165538010234567890",
    "Action": "ExportAlarmListDataForRasp",
    "Version": "2024-05-08",
    "Service": "seccenter",
    "Region": "cn-beijing"
  },
  "Result": {
    "FileName": "security-export-1715162400000000000-Abcd1234.zip"
  }
}

错误码 #

下表为您列举了该接口与业务逻辑相关的错误码。公共错误码请参见公共错误码文档。