topic Re: Checkpoint Harmony Email & Collaboration Field Schema Reference in Email and Collaboration

Checkpoint Harmony Email & Collaboration Field Schema Reference

Devavrat — Thu, 13 Jul 2023 11:37:59 GMT

Hi Team,

We are fetching Harmony Email & Collaboration through API and trying to understand the device flow based on events.

There is a field called eventStates and another field is actionName.

I am looking for clarity for these fields. I am not able to understand the workflow.

Please refer attached log object from log sample.

I am observing multiple action and changed severities, so trying to understand the work flow.

Also looking for fields description, like when eventStates is remediate or pending etc. What is the meaning of log fields and its possible values.

If there is schema reference guide available that would help too.

Any help would be appreciated.

Thank you.

Re: Checkpoint Harmony Email & Collaboration Field Schema Reference

Chris_Atkinson — Fri, 14 Jul 2023 09:30:11 GMT

Some detail is provided here, have you already checked it?

https://sc1.checkpoint.com/documents/Harmony_Email_and_Collaboration_API_Reference/Topics-HEC-Avanan-API-Reference-Guide/Managing-Security-Events/Event-query.htm?Highlight=eventstates

Re: Checkpoint Harmony Email & Collaboration Field Schema Reference

Devavrat — Fri, 14 Jul 2023 04:53:35 GMT

@Chris_Atkinson Thank you for your response.

No I have not checked this but The link is not opening.

I have gone through API guide which has possible values but there is no descriptions given there.

Re: Checkpoint Harmony Email & Collaboration Field Schema Reference

Chris_Atkinson — Fri, 14 Jul 2023 09:31:46 GMT

Link fixed - apologies

Re: Checkpoint Harmony Email & Collaboration Field Schema Reference

Devavrat — Fri, 14 Jul 2023 11:44:42 GMT

Thank you @Chris_Atkinson for your kind response.

I have already checked this, basically this is what I was saying. Possible values are provided but further no description available. For example: If eventState is remediated or dismissed, then what is exactly happened in the log? What does it mean when the eventState is dismissed or something else. Such information is usually available in schema reference guide, which explains fields and possible values.

Thank you.

Re: Checkpoint Harmony Email & Collaboration Field Schema Reference

Chris_Atkinson — Fri, 14 Jul 2023 11:53:17 GMT

The only other resource I'm familiar with is here:

https://app.swaggerhub.com/apis-docs/Check-Point/harmony-email-collaboration-smart-api/1.50#/EventState

topic Re: Checkpoint Harmony Email &amp; Collaboration Field Schema Reference in Email and Collaboration

Checkpoint Harmony Email & Collaboration Field Schema Reference

Re: Checkpoint Harmony Email & Collaboration Field Schema Reference

Re: Checkpoint Harmony Email & Collaboration Field Schema Reference

Re: Checkpoint Harmony Email & Collaboration Field Schema Reference

Re: Checkpoint Harmony Email & Collaboration Field Schema Reference

Re: Checkpoint Harmony Email & Collaboration Field Schema Reference

topic Re: Checkpoint Harmony Email & Collaboration Field Schema Reference in Email and Collaboration