How do I find x-av-req-id for API calls for Infinity HEC

[Blason_R]

Hi Team,

I need to execute certain API calls for HEC. I went through the documentation but I unable to get x-av-req-id . what field is that? is that a Account ID? or any other field?

Here is the error I am getting when I am trying to get the exception/whitelist parameters

curl -X GET -H "Accept: application/json" -H "x-av-req-id: dxxxxxe-4b37-8xxx0e7ea6" -H "Authorization: Bearer xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxsLCJtYXJrZXRwbGFjZUlkIjpudWxsLCJhdXRoVHlwZSI6IkVYVEVSTkFMIiwicmVnaW9uIjoiZXUiLCJjb29raWVWZXJzaW9uIjoiNyIsImlhdCI6MTc1NDYzMjAwNCwiZXhwIjoxNzU0NjMzODA0fQ.IFSMlTQoqkexxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxKFeg2frE-QJnT8cgbUr5XIIQj2lX3KNfp57NLjQlBxDTxKOyDGn3Owlf4PzocErpQHDmw1t6Y9pD7kQJy_WSqu2ROFdMuY69GsrtB_KuPberKlgx7u8RY7A6mdmMhJVniSL-Yyqc5_6BrH5_pNABVGnheIy1RIq5-4VHQdDEeOzQxAA64idqBjayjQNMssj9ATk2sUJ9trGggllQs0LpdouZJJmvNdg5QNRFF8-QR0GCWNhuOE-9DI7nIAlCGXD5jwwXwaO4upzTzT7mc1n3fI0xcn3kX5dah5I-_GBlyMVLb6rWX6AvqAOYXMyaKg453I" https://cloudinfra-gw-us.portal.checkpoint.com/app/hec-api/v1.0/exceptions/whitelist | jq .
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 168 100 168 0 0 110 0 0:00:01 0:00:01 --:--:-- 110
{
"responseEnvelope": {
"requestId": "dcc8caed-46ce-4b37-8e2c-c08bef0e7ea6",
"responseCode": 500,
"responseText": "internal_error[ValueError]",
"recordsNumber": 0,
"scrollId": ""
}
}

Can someone pls help me on those parameter?

[_Val_]

Did you take a look at the documentation yet? If still struggling, please open a TAC ticket: https://help.checkpoint.com

[Blason_R]

Yes - I verified. Need to reach TAC now since I am unable to execute queries using API

[_Val_]

Probably the best course of action. Please let us know when you figure out the issue.

[bleyers]

Did you mange to get this working ?

Got the same question...

[Blason_R]

Unfortunately, TAC is taking their own time to respond and providing unusual answers that are not relevant.

[bleyers]

Try using the following in powershell

[guid]::NewGuid().ToString()

Then add this value to the  x-av-req-id header

Got the idea from the example script in python
https://github.com/nihilp/Checkpoint_HEC_API/blob/main/HEC_Blocklist_API.py