批量对告警执行文件隔离、文件删除或进程终止。应先调用 ListBatchEndpointHandleMethods 获取可处置对象；未传 Files 时不处理文件，未传 Processes 时不处理进程。

调试 #

请求参数 #

下表仅列出该接口特有的请求参数和部分公共参数。更多信息请见公共参数。

返回参数 #

下表仅列出本接口特有的返回参数。更多信息请参见返回结构。

请求示例 #

POST /?Action=HandleEndpointAlarms&Version=2024-05-08 HTTP/1.1
Host: seccenter.volcengineapi.com
Content-Type: application/json; charset=UTF-8
X-Date: 20241120T080538Z
X-Content-Sha256: 287e874e******d653b44d21e
Authorization: HMAC-SHA256 Credential=Adfks******wekfwe/20241120/cn-beijing/seccenter/request, SignedHeaders=host;x-content-sha256;x-date, Signature=47a7d934ff7b37c03938******cd7b8278a40a1057690c401e92246a0e41085f

{
  "AlarmType": "hids",
  "HandleList": [
    {
      "AgentID": "agent-id-001",
      "AlarmIDList": [
        "alarm-id-001"
      ],
      "Files": [
        {
          "Action": "isolation",
          "FilePath": "/var/log/example.log"
        }
      ],
      "Processes": [
        {
          "Cmdline": "ls -la",
          "Exe": "/usr/bin/bash",
          "Pid": 1234
        }
      ],
      "SpanTraceID": [
        79,
        185,
        47,
        53,
        122,
        34,
        147,
        120,
        217,
        154,
        126,
        74,
        98,
        237,
        124,
        92
      ],
      "SpanUniqueID": [
        0,
        103,
        170,
        11,
        166,
        2,
        183,
        173
      ]
    }
  ]
}

返回示例 #

{
  "ResponseMetadata": {
    "RequestId": "20241120165538010234567890",
    "Action": "HandleEndpointAlarms",
    "Version": "2024-05-08",
    "Service": "seccenter",
    "Region": "cn-beijing"
  },
  "Result": {
    "Data": "success"
  }
}

错误码 #

下表为您列举了该接口与业务逻辑相关的错误码。公共错误码请参见公共错误码文档。