List Davis security recommendations in Dynatrace with the Vulnerabilities API and a segment filter, using a time range to narrow results.
| POST | SaaS | https://{your-environment-id}.apps.dynatrace.com/platform/vulnerabilities/v1/davis-security-recommendations:segment |
You use start-time and end-time to scope the requested timeframe, then send filterSegments in the request body. It returns an array of Davis security recommendations from Dynatrace.
To execute this request, you need a platform token or OAuth access token with vulnerability-service:vulnerabilities:read scope. To learn how to obtain and use it, see Tokens and authentication.
| Parameter | Type | Description | In | Required |
|---|---|---|---|---|
| start-time | string | The start of the requested timeframe. You can use one of the following formats:
| query | Optional |
| end-time | string | The end of the requested timeframe. | query | Optional |
| body | Segment | The JSON body of the request containing the filter segments. | body | Optional |
SegmentRequestBody object| Element | Type | Description | Required |
|---|---|---|---|
| filterSegments | Filter | - | Optional |
FilterSegment objectUse filter segments to define the considered affected entities. For more information see the documentation.
| Element | Type | Description | Required |
|---|---|---|---|
| id | string | - | Required |
| variables | Filter | - | Optional |
FilterSegmentVariable object| Element | Type | Description | Required |
|---|---|---|---|
| name | string | - | Required |
| values | string[] | - | Required |
This is a model of the request body, showing the possible elements. It has to be adjusted for usage in an actual request.
{"filterSegments": [{"id": "string","variables": [{"name": "string","values": ["string"]}]}]}
| Code | Type | Description |
|---|---|---|
| 200 | Davis | An array of davis security recommendations |
| 400 | - | - |
| 401 | - | - |
| 403 | - | - |
| 404 | - | - |
| 429 | - | - |
| 500 | - | - |
| 501 | - | - |
| 503 | - | - |
DavisSecurityRecommendations object| Element | Type | Description |
|---|---|---|
| recommendations | Davis | - |
DavisSecurityRecommendation object| Element | Type | Description |
|---|---|---|
| technology | Technology | -The element can hold these values
|
| action | Davis | -The element can hold these values
|
| componentName | string | - |
| packageName | string | - |
| highestRiskLevel | Risk | -The element can hold these values
|
| highestRiskLevelVulnerabilities | integer | - |
| totalVulnerabilities | integer | - |
| filter | string | - |
Technology objectDavisSecurityRecommendationAction objectRiskLevel object{"recommendations": [{"technology": "DOTNET","action": "UPGRADE","componentName": "string","packageName": "string","highestRiskLevel": "NONE","highestRiskLevelVulnerabilities": 1,"totalVulnerabilities": 1,"filter": "string"}]}