调试

API Explorer

您可以通过 API Explorer 在线发起调用，无需关注签名生成过程，快速获取调用结果。

去调试

请求参数

下表仅列出该接口特有的请求参数和部分公共参数。更多信息请见公共参数。

参数	类型	是否必填	示例值	描述
Action	String	是	GetNeighboringAlarm	要执行的操作，取值：GetNeighboringAlarm。
Version	String	是	2024-05-08	API的版本，取值：2024-05-08。
AlarmType	String	是	hids	告警类型：hids/kube/rasp/virus
Conditions	Object	否	--	相邻告警查询筛选条件；不传时不附加筛选条件
AlarmID	String	否	alarm-id-001	基准告警 ID：以该告警在当前筛选结果中的位置为参照，返回排序相邻的上一条和下一条告警；可从对应告警列表获取，不传或格式非法时 Prev、Next 返回空

返回参数

下表仅列出本接口特有的返回参数。更多信息请参见返回结构。

参数	类型	示例值	描述
Prev	Object	--	Prev
Next	Object	--	Next

请求示例

POST /?Action=GetNeighboringAlarm&Version=2024-05-08 HTTP/1.1
Host: seccenter.volcengineapi.com
Content-Type: application/json; charset=UTF-8
X-Date: 20241120T080538Z
X-Content-Sha256: 287e874e******d653b44d21e
Authorization: HMAC-SHA256 Credential=Adfks******wekfwe/20241120/cn-beijing/seccenter/request, SignedHeaders=host;x-content-sha256;x-date, Signature=47a7d934ff7b37c03938******cd7b8278a40a1057690c401e92246a0e41085f

{
  "AlarmID": "alarm-id-001",
  "AlarmType": "hids",
  "Conditions": {
    "AgentGroup": "production-hosts",
    "AgentGroupList": [
      "production"
    ],
    "AgentID": "agent-id-001",
    "AgentIDList": [
      "agent-id-001"
    ],
    "AgentTags": [
      "production"
    ],
    "AlarmHandleResultList": [
      1,
      2
    ],
    "AlarmID": "alarm-id-001",
    "AlertTags": [
      "production"
    ],
    "CloudProviders": [
      "volc"
    ],
    "ClusterID": "cluster-id-001",
    "ClusterName": "example-name",
    "ClusterRegion": "cn-beijing",
    "ClusterTags": [
      "production"
    ],
    "ContainerID": "container-id-001",
    "ContainerName": "example-name",
    "EventID": "event-id-001",
    "EventName": "example-name",
    "EventReason": "example description",
    "Exe": "/usr/bin/bash",
    "FileHash": "d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2",
    "FilePath": "/var/log/example.log",
    "Hostname": "host-001",
    "IP": "192.0.2.10",
    "ImageName": "example-name",
    "LastAlarmTimeEnd": 1786579199,
    "LastAlarmTimeStart": 1786492800,
    "LeafGroupIDs": [
      "group-id-101",
      "group-id-102"
    ],
    "Level": [
      "high",
      "medium"
    ],
    "MlpInstanceID": "mlp-instance-id-001",
    "Name": "example-name",
    "OperationList": [
      "write"
    ],
    "ProbeHook": "java.lang.Runtime.exec",
    "RaspArgv": "ls -la",
    "Status": [
      0,
      1
    ],
    "Tags": [
      "production"
    ],
    "TaskID": "task-id-001",
    "TimeEnd": 1786579199,
    "TimeStart": 1786492800,
    "TopGroupID": "group-id-001",
    "Type": [
      "credential_access"
    ],
    "VirusType": "Webshell",
    "WhiteListID": "whitelist-id-001",
    "WhiteListName": "example-name",
    "security_intelligence_results": [
      "malicious"
    ]
  }
}

返回示例

{
  "ResponseMetadata": {
    "RequestId": "20241120165538010234567890",
    "Action": "GetNeighboringAlarm",
    "Version": "2024-05-08",
    "Service": "seccenter",
    "Region": "cn-beijing"
  },
  "Result": {
    "Next": {
      "AgentGroup": "production-hosts",
      "AgentID": "agent-id-001",
      "AlarmCount": 1,
      "AlarmHandleResult": 11,
      "AlarmHostname": "host-001",
      "AlarmID": "alarm-id-001",
      "AlarmTime": 1761208351,
      "AlertTags": [
        "已处理"
      ],
      "AnalysisRecordUUID": "sec_intel_risk_analysis_alarm-id-001",
      "Args": [
        "RASP"
      ],
      "ArgsList": [
        "RASP"
      ],
      "ArgvList": [
        "java -jar app.jar"
      ],
      "AttributionList": [
        {
          "Type": "USER",
          "Value": "value"
        }
      ],
      "Class": "Webshell",
      "Cluster": {
        "ClusterArea": "cn-beijing",
        "ClusterID": "cluster-id-001",
        "ClusterName": "example-name",
        "ClusterTags": [
          "production"
        ],
        "RuleType1st": "default",
        "RuleType2nd": "default"
      },
      "Confidence": "8",
      "DataType": "601",
      "ErrorReason": "example description",
      "EventID": "event-id-001",
      "EventName": "example-name",
      "Exe": "/usr/bin/bash",
      "FileDownloadable": true,
      "FileHash": "d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2",
      "FilePath": "/var/log/example.log",
      "GroupPath": "/未分组",
      "HandleFailReason": "example description",
      "HandleTime": 1764640425,
      "Host": {
        "AgentID": "agent-id-001",
        "AgentTags": [
          "production"
        ],
        "Hostname": "host-001",
        "InnerIPList": [
          "192.0.2.10"
        ],
        "OuterIPList": [
          "192.0.2.10"
        ]
      },
      "ImageName": "example-name",
      "InDocker": "true",
      "LLMAnalysisResult": "success",
      "LLMProcessed": true,
      "LastAlarmTime": 1786579199,
      "Level": "high",
      "MlpInstanceID": "instance-id-001",
      "MlpPrivateIP": "192.0.2.10",
      "Name": "可疑代理程序",
      "NsPid": "ns-pid-id-001",
      "OperationList": [
        "write"
      ],
      "OsType": "linux",
      "Pid": "32754",
      "ProbeHook": "java.lang.Runtime.exec",
      "Region": "cn-shanghai",
      "SecurityIntelligenceComplete": true,
      "SecurityIntelligenceError": "model service unavailable",
      "SecurityIntelligenceResult": "FALSE",
      "SecurityIntelligenceStatus": "PENDING",
      "Sid": "sid-id-001",
      "StackTraceFormat": "RASP",
      "StackTraceHash": "d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2",
      "Status": 1,
      "TraceID": "trace_alarm-id-001",
      "Type": "command_control"
    },
    "Prev": {
      "AgentGroup": "production-hosts",
      "AgentID": "agent-id-001",
      "AlarmCount": 1,
      "AlarmHandleResult": 11,
      "AlarmHostname": "host-001",
      "AlarmID": "alarm-id-001",
      "AlarmTime": 1761208351,
      "AlertTags": [
        "已处理"
      ],
      "AnalysisRecordUUID": "sec_intel_risk_analysis_alarm-id-001",
      "Args": [
        "RASP"
      ],
      "ArgsList": [
        "RASP"
      ],
      "ArgvList": [
        "java -jar app.jar"
      ],
      "AttributionList": [
        {
          "Type": "USER",
          "Value": "value"
        }
      ],
      "Class": "Webshell",
      "Cluster": {
        "ClusterArea": "cn-beijing",
        "ClusterID": "cluster-id-001",
        "ClusterName": "example-name",
        "ClusterTags": [
          "production"
        ],
        "RuleType1st": "default",
        "RuleType2nd": "default"
      },
      "Confidence": "8",
      "DataType": "601",
      "ErrorReason": "example description",
      "EventID": "event-id-001",
      "EventName": "example-name",
      "Exe": "/usr/bin/bash",
      "FileDownloadable": true,
      "FileHash": "d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2",
      "FilePath": "/var/log/example.log",
      "GroupPath": "/未分组",
      "HandleFailReason": "example description",
      "HandleTime": 1764640425,
      "Host": {
        "AgentID": "agent-id-001",
        "AgentTags": [
          "production"
        ],
        "Hostname": "host-001",
        "InnerIPList": [
          "192.0.2.10"
        ],
        "OuterIPList": [
          "192.0.2.10"
        ]
      },
      "ImageName": "example-name",
      "InDocker": "true",
      "LLMAnalysisResult": "success",
      "LLMProcessed": true,
      "LastAlarmTime": 1786579199,
      "Level": "high",
      "MlpInstanceID": "instance-id-001",
      "MlpPrivateIP": "192.0.2.10",
      "Name": "可疑代理程序",
      "NsPid": "ns-pid-id-001",
      "OperationList": [
        "write"
      ],
      "OsType": "linux",
      "Pid": "32754",
      "ProbeHook": "java.lang.Runtime.exec",
      "Region": "cn-shanghai",
      "SecurityIntelligenceComplete": true,
      "SecurityIntelligenceError": "model service unavailable",
      "SecurityIntelligenceResult": "FALSE",
      "SecurityIntelligenceStatus": "PENDING",
      "Sid": "sid-id-001",
      "StackTraceFormat": "RASP",
      "StackTraceHash": "d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2",
      "Status": 1,
      "TraceID": "trace_alarm-id-001",
      "Type": "command_control"
    }
  }
}

错误码

下表为您列举了该接口与业务逻辑相关的错误码。公共错误码请参见公共错误码文档。

状态码	错误码	错误信息	说明
400	MissingParameter	The required parameter %s is missing.	请求参数缺失，请检查参数是否已正确传入。
400	InvalidParameter	The specified parameter %s is invalid.	请求参数错误，请检查参数传递内容是否正确。
400	OperationDenied	Operation is denied because the specified resource is in use.	不允许的操作，请检查当前资源是否被占用。
500	InternalError	The request has failed due to an unknown error.	服务器内部错误，请稍后重试或联系技术支持。
500	DBOperateError	The request has failed because database return error: %s	数据库操作异常，请稍后重试或联系技术支持。

最近更新时间：2026.10.30 14:06:19

这个页面对您有帮助吗？

有用

无用

云安全中心

调试 #

请求参数 #

返回参数 #

请求示例 #

返回示例 #

错误码 #

调试

请求参数

返回参数

请求示例

返回示例

错误码