Na}{

File Content: `incidents.yaml`

get:
  help: |
    List incidents
  return_type: IncidentsAgentResponse
  cli:
    users:
      - root
  type: dict
  schema:
    by_abuser_ip:
      type: string
      nullable: true
      help: |
        Filter by abuser IP address

    by_country_code:
      type: string
      nullable: true
      help: |
        Filter by country code

    by_panel_user:
      type: string
      nullable: true
      help: |
        Filter by panel user domains

    by_list:
      type: list
      nullable: true
      schema:
        type: string
        allowed:
          - white
          - black
          - gray
      help: (internal)

    by_purpose:
      type: list
      nullable: true
      schema:
        type: string
        allowed:
          - white
          - drop
          - captcha
      help: (internal)

    severity:
      type: integer
      coerce: int
      nullable: true
      help: |
        Filter by minimum severity (1-15).
        See https://www.ossec.net/docs/manual/rules-decoders/rule-levels.html for details on severity levels.
    search:
      type: string
      nullable: true
      help: |
        Search by IP address, name, description.

    limit:
      type: integer
      coerce: int
      default: 50
      help: Page size
    offset:
      type: integer
      coerce: int
      default: 0
      help: Page offset

    since:
      type: integer
      coerce: int
      excludes: period
      check_with:
        - timestamp
      help: |
        Show incidents after this unix timestamp.

    to:
      type: integer
      coerce: int
      check_with:
        - timestamp
      default_setter: now
      help: |
        Show incidents before this unix timestamp.

    period:
      type: period
      coerce: period
      excludes: since
      help: (internal)
    order_by:
      type: list
      schema:
        type: order_by
        coerce: order_by
      nullable: true
      help: |
        List of fields to order by, each followed by a `+` (ascending) or `-` (descending).
        E.g. `["severity+","timestamp-"]` would order by event severity ascending and timestamp descending.

clean:
  help: (internal)
  cli:
    users:
      - root
  type: dict
  schema:
    days:
      type: integer
      coerce: int
      min: 0
      check_with:
        - max_days
    limit:
      type: integer
      coerce: int

Name	Size	Permission
lists	---	0755
configuration_management.pickle	512 bytes	0644
configuration_management.yaml	499 bytes	0644
conflicts.pickle	278 bytes	0644
conflicts.yaml	263 bytes	0644
control-panel.pickle	204 bytes	0644
control-panel.yaml	206 bytes	0644
custom-lists.pickle	106 bytes	0644
custom-lists.yaml	90 bytes	0644
features.pickle	945 bytes	0644
features.yaml	1022 bytes	0644
health.pickle	54 bytes	0644
health.yaml	39 bytes	0644
hosting-panel.pickle	486 bytes	0644
hosting-panel.yaml	461 bytes	0644
ignored-rules.pickle	1777 bytes	0644
ignored-rules.yaml	1926 bytes	0644
import.pickle	209 bytes	0644
import.yaml	202 bytes	0644
incidents.pickle	1976 bytes	0644
incidents.yaml	2359 bytes	0644
kcarectl.pickle	242 bytes	0644
kcarectl.yaml	205 bytes	0644
malware-generic-event.pickle	120 bytes	0644
malware-generic-event.yaml	102 bytes	0644
myimunify.pickle	714 bytes	0644
myimunify.yaml	779 bytes	0644
proactive.pickle	4053 bytes	0644
proactive.yaml	4592 bytes	0644
remote_proxy.pickle	1371 bytes	0644
remote_proxy.yaml	1535 bytes	0644
smart_advice.pickle	182 bytes	0644
smart_advice.yaml	165 bytes	0644
smtp-blocking.pickle	311 bytes	0644
smtp-blocking.yaml	295 bytes	0644
uninstall-cleanup.pickle	401 bytes	0644
uninstall-cleanup.yaml	386 bytes	0644
whitelist-domain.pickle	849 bytes	0644
whitelist-domain.yaml	963 bytes	0644
whitelist_rbl.pickle	103 bytes	0644
whitelist_rbl.yaml	87 bytes	0644
whitelisted-crawlers.pickle	879 bytes	0644
whitelisted-crawlers.yaml	964 bytes	0644

File Content: incidents.yaml

File Content: `incidents.yaml`