对指定主机入侵或病毒告警执行文件隔离、文件删除或进程终止。应先调用 ListEndpointHandleMethods 获取可处置对象；Files 不传时不处理文件，Processes 不传时不处理进程，AlarmID 可从对应告警列表获取。

调试 #

请求参数 #

下表仅列出该接口特有的请求参数和部分公共参数。更多信息请见公共参数。

返回参数 #

下表仅列出本接口特有的返回参数。更多信息请参见返回结构。

请求示例 #

POST /?Action=HandleAlarmByAgent&Version=2024-05-08 HTTP/1.1
Host: seccenter.volcengineapi.com
Content-Type: application/json; charset=UTF-8
X-Date: 20241120T080538Z
X-Content-Sha256: 287e874e******d653b44d21e
Authorization: HMAC-SHA256 Credential=Adfks******wekfwe/20241120/cn-beijing/seccenter/request, SignedHeaders=host;x-content-sha256;x-date, Signature=47a7d934ff7b37c03938******cd7b8278a40a1057690c401e92246a0e41085f

{
  "AlarmID": "alarm-id-001",
  "AlarmType": "hids",
  "Files": [
    {
      "Action": "isolation",
      "FilePath": "/var/log/example.log"
    }
  ],
  "Processes": [
    {
      "Cmdline": "ls -la",
      "Exe": "/usr/bin/bash",
      "Pid": 1234
    }
  ],
  "SpanTraceID": [
    79,
    185,
    47,
    53,
    122,
    34,
    147,
    120,
    217,
    154,
    126,
    74,
    98,
    237,
    124,
    92
  ],
  "SpanUniqueID": [
    0,
    103,
    170,
    11,
    166,
    2,
    183,
    173
  ]
}

返回示例 #

{
  "ResponseMetadata": {
    "RequestId": "20241120165538010234567890",
    "Action": "HandleAlarmByAgent",
    "Version": "2024-05-08",
    "Service": "seccenter",
    "Region": "cn-beijing"
  },
  "Result": {
    "Data": "filebox-id-001"
  }
}

错误码 #

下表为您列举了该接口与业务逻辑相关的错误码。公共错误码请参见公共错误码文档。