This section documents the V3 Reporting API endpoints that provide access to comprehensive audit and journey data from ObservePoint. Use these endpoints to retrieve detailed reports, export data, manage alerts, and analyze web performance metrics from your ObservePoint scans.
V3 API
https://api.observepoint.com/
Alert definition
Passing null instead of this array while updating an entity will prevent API from changing associated labels
Deprecated metric types:
- ACCOUNT_USAGE_THIS_MONTH_AUDIT_PAGE_SCANNED_COUNT
- ACCOUNT_USAGE_12_MONTH_AUDIT_PAGE_SCANNED_COUNT
- ACCOUNT_USAGE_12_MONTH_WJ_RUN_COUNT
- ACCOUNT_USAGE_THIS_MONTH_WJ_RUN_COUNT
- ACCOUNT_USAGE_LAST_30_DAYS_LOGIN_USER_COUNT
- PAGE_SUMMARY_FAILED_RULE_COUNT
Behaviour per type:
- VALUE_CHANGE: current - previous
- VALUE_CHANGE_ABS: ABS(current - previous)
- RELATIVE_VALUE_CHANGE: 100% * (current - previous) / previous
- RELATIVE_VALUE_CHANGE: ABS(100% * (current - previous) / previous)
Composite metric change operators shown on ObservePoint UI should be defined as described below:
Changes by (∆)
= VALUE_CHANGE_ABS + GREATER_OR_EQUAL(positive number)Increases by (+)
= VALUE_CHANGE + GREATER_OR_EQUAL(positive number)Decreases by (-)
= VALUE_CHANGE + LESS_OR_EQUAL(negative number)Any change
= VALUE_CHANGE_ABS (or VALUE_CHANGE) + NOT_EQUAL(0)Changes by (∆ %)
= RELATIVE_CHANGE_ABS + GREATER_OR_EQUAL(positive number)Increases by (+%)
= RELATIVE_CHANGE + GREATER_OR_EQUAL(positive number)Decreases by (-%)
= RELATIVE_CHANGE + LESS_OR_EQUAL(negative number)
Subtypes: - AlertMetricSpecificValueComparator - AlertMetricValueInRangeComparator - AlertMetricValueNotInRangeComparator
Filters to be applied before computing the alert. Exact type depends on metricType
, see mapping in AlertMetricTypeToFilterMapping
List of email addresses that receive notifications when alert triggers. Will be replaced with Notification Profiles
Behaviour per type:
- WHEN_NEWLY_TRIGGERED: (default) send alert when goes from "ok" to "triggered" (resets when no longer triggered)
- ALWAYS_WHEN_TRIGGERED: send alert notification each time it is triggered per run
Makes this alert selected by default in data-source (audit/WJ) creation UI. This is a user-specific flag.
Passing null instead of this array while updating an alert will prevent API from changing its assignments.
To pass only updates of assignments (additions/removals) for existing alert use PATCH /v3/alerts/{alertId}/target-items
endpoint
- ObservePoint Production API
https://api.observepoint.com/v3/alerts
- curl
- JavaScript
- Node.js
- Python
- Java
- C#
- PHP
- Go
- Ruby
- R
- Payload
curl -i -X POST \
https://api.observepoint.com/v3/alerts \
-H 'Authorization: YOUR_API_KEY_HERE' \
-H 'Content-Type: application/json' \
-d '{
"name": "string",
"labels": [
0
],
"metricType": "ACCOUNT_USAGE_THIS_MONTH_AUDIT_PAGE_SCANNED_COUNT",
"metricChangeType": "VALUE_CHANGE",
"targetValueComparator": {
"operator": "GREATER"
},
"filtersV0": {},
"emails": [
"user@example.com"
],
"customAlertMessage": "string",
"notificationPolicy": "WHEN_NEWLY_TRIGGERED",
"isDefaultForNewDataSources": true,
"assignments": [
{
"itemType": "AUDIT",
"itemId": 0
}
],
"skipSendingAlertSharedWithYouEmail": true
}'
{ "id": 0 }
- ObservePoint Production API
https://api.observepoint.com/v3/alerts/{alertId}
- curl
- JavaScript
- Node.js
- Python
- Java
- C#
- PHP
- Go
- Ruby
- R
- Payload
curl -i -X GET \
'https://api.observepoint.com/v3/alerts/{alertId}' \
-H 'Authorization: YOUR_API_KEY_HERE'
alert definition
Deprecated metric types:
- ACCOUNT_USAGE_THIS_MONTH_AUDIT_PAGE_SCANNED_COUNT
- ACCOUNT_USAGE_12_MONTH_AUDIT_PAGE_SCANNED_COUNT
- ACCOUNT_USAGE_12_MONTH_WJ_RUN_COUNT
- ACCOUNT_USAGE_THIS_MONTH_WJ_RUN_COUNT
- ACCOUNT_USAGE_LAST_30_DAYS_LOGIN_USER_COUNT
- PAGE_SUMMARY_FAILED_RULE_COUNT
Behaviour per type:
- VALUE_CHANGE: current - previous
- VALUE_CHANGE_ABS: ABS(current - previous)
- RELATIVE_VALUE_CHANGE: 100% * (current - previous) / previous
- RELATIVE_VALUE_CHANGE: ABS(100% * (current - previous) / previous)
Composite metric change operators shown on ObservePoint UI should be defined as described below:
Changes by (∆)
= VALUE_CHANGE_ABS + GREATER_OR_EQUAL(positive number)Increases by (+)
= VALUE_CHANGE + GREATER_OR_EQUAL(positive number)Decreases by (-)
= VALUE_CHANGE + LESS_OR_EQUAL(negative number)Any change
= VALUE_CHANGE_ABS (or VALUE_CHANGE) + NOT_EQUAL(0)Changes by (∆ %)
= RELATIVE_CHANGE_ABS + GREATER_OR_EQUAL(positive number)Increases by (+%)
= RELATIVE_CHANGE + GREATER_OR_EQUAL(positive number)Decreases by (-%)
= RELATIVE_CHANGE + LESS_OR_EQUAL(negative number)
Subtypes: - AlertMetricSpecificValueComparator - AlertMetricValueInRangeComparator - AlertMetricValueNotInRangeComparator
Filters to be applied before computing the alert. Exact type depends on metricType
, see mapping in AlertMetricTypeToFilterMapping
List of email addresses that receive notifications when alert triggers. Will be replaced with Notification Profiles
Behaviour per type:
- WHEN_NEWLY_TRIGGERED: (default) send alert when goes from "ok" to "triggered" (resets when no longer triggered)
- ALWAYS_WHEN_TRIGGERED: send alert notification each time it is triggered per run
{ "name": "string", "metricType": "ACCOUNT_USAGE_THIS_MONTH_AUDIT_PAGE_SCANNED_COUNT", "metricChangeType": "VALUE_CHANGE", "targetValueComparator": { "operator": "GREATER" }, "filtersV0": {}, "id": 0, "labels": [ 0 ], "emails": [ "user@example.com" ], "customAlertMessage": "string", "notificationPolicy": "WHEN_NEWLY_TRIGGERED", "isDefaultForNewDataSources": true }
Passing null instead of this array while updating an entity will prevent API from changing associated labels
Deprecated metric types:
- ACCOUNT_USAGE_THIS_MONTH_AUDIT_PAGE_SCANNED_COUNT
- ACCOUNT_USAGE_12_MONTH_AUDIT_PAGE_SCANNED_COUNT
- ACCOUNT_USAGE_12_MONTH_WJ_RUN_COUNT
- ACCOUNT_USAGE_THIS_MONTH_WJ_RUN_COUNT
- ACCOUNT_USAGE_LAST_30_DAYS_LOGIN_USER_COUNT
- PAGE_SUMMARY_FAILED_RULE_COUNT
Behaviour per type:
- VALUE_CHANGE: current - previous
- VALUE_CHANGE_ABS: ABS(current - previous)
- RELATIVE_VALUE_CHANGE: 100% * (current - previous) / previous
- RELATIVE_VALUE_CHANGE: ABS(100% * (current - previous) / previous)
Composite metric change operators shown on ObservePoint UI should be defined as described below:
Changes by (∆)
= VALUE_CHANGE_ABS + GREATER_OR_EQUAL(positive number)Increases by (+)
= VALUE_CHANGE + GREATER_OR_EQUAL(positive number)Decreases by (-)
= VALUE_CHANGE + LESS_OR_EQUAL(negative number)Any change
= VALUE_CHANGE_ABS (or VALUE_CHANGE) + NOT_EQUAL(0)Changes by (∆ %)
= RELATIVE_CHANGE_ABS + GREATER_OR_EQUAL(positive number)Increases by (+%)
= RELATIVE_CHANGE + GREATER_OR_EQUAL(positive number)Decreases by (-%)
= RELATIVE_CHANGE + LESS_OR_EQUAL(negative number)
Subtypes: - AlertMetricSpecificValueComparator - AlertMetricValueInRangeComparator - AlertMetricValueNotInRangeComparator
Filters to be applied before computing the alert. Exact type depends on metricType
, see mapping in AlertMetricTypeToFilterMapping
List of email addresses that receive notifications when alert triggers. Will be replaced with Notification Profiles
Behaviour per type:
- WHEN_NEWLY_TRIGGERED: (default) send alert when goes from "ok" to "triggered" (resets when no longer triggered)
- ALWAYS_WHEN_TRIGGERED: send alert notification each time it is triggered per run
Makes this alert selected by default in data-source (audit/WJ) creation UI. This is a user-specific flag.
Passing null instead of this array while updating an alert will prevent API from changing its assignments.
To pass only updates of assignments (additions/removals) for existing alert use PATCH /v3/alerts/{alertId}/target-items
endpoint
- ObservePoint Production API
https://api.observepoint.com/v3/alerts/{alertId}
- curl
- JavaScript
- Node.js
- Python
- Java
- C#
- PHP
- Go
- Ruby
- R
- Payload
curl -i -X PUT \
'https://api.observepoint.com/v3/alerts/{alertId}' \
-H 'Authorization: YOUR_API_KEY_HERE' \
-H 'Content-Type: application/json' \
-d '{
"name": "string",
"labels": [
0
],
"metricType": "ACCOUNT_USAGE_THIS_MONTH_AUDIT_PAGE_SCANNED_COUNT",
"metricChangeType": "VALUE_CHANGE",
"targetValueComparator": {
"operator": "GREATER"
},
"filtersV0": {},
"emails": [
"user@example.com"
],
"customAlertMessage": "string",
"notificationPolicy": "WHEN_NEWLY_TRIGGERED",
"isDefaultForNewDataSources": true,
"assignments": [
{
"itemType": "AUDIT",
"itemId": 0
}
],
"skipSendingAlertSharedWithYouEmail": true
}'
- ObservePoint Production API
https://api.observepoint.com/v3/alerts/{alertId}
- curl
- JavaScript
- Node.js
- Python
- Java
- C#
- PHP
- Go
- Ruby
- R
- Payload
curl -i -X DELETE \
'https://api.observepoint.com/v3/alerts/{alertId}' \
-H 'Authorization: YOUR_API_KEY_HERE'
- ObservePoint Production API
https://api.observepoint.com/v3/alerts/{alertId}/labels
- curl
- JavaScript
- Node.js
- Python
- Java
- C#
- PHP
- Go
- Ruby
- R
- Payload
curl -i -X PUT \
'https://api.observepoint.com/v3/alerts/{alertId}/labels' \
-H 'Authorization: YOUR_API_KEY_HERE' \
-H 'Content-Type: application/json' \
-d '{
"labels": [
0
]
}'
Deprecated metric types:
- ACCOUNT_USAGE_THIS_MONTH_AUDIT_PAGE_SCANNED_COUNT
- ACCOUNT_USAGE_12_MONTH_AUDIT_PAGE_SCANNED_COUNT
- ACCOUNT_USAGE_12_MONTH_WJ_RUN_COUNT
- ACCOUNT_USAGE_THIS_MONTH_WJ_RUN_COUNT
- ACCOUNT_USAGE_LAST_30_DAYS_LOGIN_USER_COUNT
- PAGE_SUMMARY_FAILED_RULE_COUNT
- ObservePoint Production API
https://api.observepoint.com/v3/alerts/library
- curl
- JavaScript
- Node.js
- Python
- Java
- C#
- PHP
- Go
- Ruby
- R
- Payload
curl -i -X POST \
'https://api.observepoint.com/v3/alerts/library?size=50&page=0&sortDesc=false&sortBy=ALERT_NAME' \
-H 'Authorization: YOUR_API_KEY_HERE' \
-H 'Content-Type: application/json' \
-d '{
"alertName": "string",
"metricType": "ACCOUNT_USAGE_THIS_MONTH_AUDIT_PAGE_SCANNED_COUNT",
"labels": [
0
],
"createdByUserId": 123,
"isSubscribed": false
}'
Alerts Library items
Common metadata for iterable
Total number of items available from all result pages combined
Page size - number of items per result page configured by size
query parameter or default page size
Deprecated metric types:
- ACCOUNT_USAGE_THIS_MONTH_AUDIT_PAGE_SCANNED_COUNT
- ACCOUNT_USAGE_12_MONTH_AUDIT_PAGE_SCANNED_COUNT
- ACCOUNT_USAGE_12_MONTH_WJ_RUN_COUNT
- ACCOUNT_USAGE_THIS_MONTH_WJ_RUN_COUNT
- ACCOUNT_USAGE_LAST_30_DAYS_LOGIN_USER_COUNT
- PAGE_SUMMARY_FAILED_RULE_COUNT
Date-time in RFC3339 profile ISO 8601 format with the following additional restrictions:
- An uppercase T must separate the date and time portions.
- An uppercase Z must denote that a numeric time zone offset isn't present.
In general, these timestamp requirements are the same in AWS Step Functions - Choice Rules
{ "metadata": { "pagination": { … } }, "alerts": [ { … } ] }
Deprecated metric types:
- ACCOUNT_USAGE_THIS_MONTH_AUDIT_PAGE_SCANNED_COUNT
- ACCOUNT_USAGE_12_MONTH_AUDIT_PAGE_SCANNED_COUNT
- ACCOUNT_USAGE_12_MONTH_WJ_RUN_COUNT
- ACCOUNT_USAGE_THIS_MONTH_WJ_RUN_COUNT
- ACCOUNT_USAGE_LAST_30_DAYS_LOGIN_USER_COUNT
- PAGE_SUMMARY_FAILED_RULE_COUNT
- ObservePoint Production API
https://api.observepoint.com/v3/alerts/metrics/{metricType}
- curl
- JavaScript
- Node.js
- Python
- Java
- C#
- PHP
- Go
- Ruby
- R
- Payload
curl -i -X GET \
'https://api.observepoint.com/v3/alerts/metrics/{metricType}?size=50&page=0&sortDesc=false&sortBy=ALERT_NAME' \
-H 'Authorization: YOUR_API_KEY_HERE'
All alerts in an account with the same metric
Common metadata for iterable
Total number of items available from all result pages combined
Page size - number of items per result page configured by size
query parameter or default page size
Deprecated metric types:
- ACCOUNT_USAGE_THIS_MONTH_AUDIT_PAGE_SCANNED_COUNT
- ACCOUNT_USAGE_12_MONTH_AUDIT_PAGE_SCANNED_COUNT
- ACCOUNT_USAGE_12_MONTH_WJ_RUN_COUNT
- ACCOUNT_USAGE_THIS_MONTH_WJ_RUN_COUNT
- ACCOUNT_USAGE_LAST_30_DAYS_LOGIN_USER_COUNT
- PAGE_SUMMARY_FAILED_RULE_COUNT
Behaviour per type:
- VALUE_CHANGE: current - previous
- VALUE_CHANGE_ABS: ABS(current - previous)
- RELATIVE_VALUE_CHANGE: 100% * (current - previous) / previous
- RELATIVE_VALUE_CHANGE: ABS(100% * (current - previous) / previous)
Composite metric change operators shown on ObservePoint UI should be defined as described below:
Changes by (∆)
= VALUE_CHANGE_ABS + GREATER_OR_EQUAL(positive number)Increases by (+)
= VALUE_CHANGE + GREATER_OR_EQUAL(positive number)Decreases by (-)
= VALUE_CHANGE + LESS_OR_EQUAL(negative number)Any change
= VALUE_CHANGE_ABS (or VALUE_CHANGE) + NOT_EQUAL(0)Changes by (∆ %)
= RELATIVE_CHANGE_ABS + GREATER_OR_EQUAL(positive number)Increases by (+%)
= RELATIVE_CHANGE + GREATER_OR_EQUAL(positive number)Decreases by (-%)
= RELATIVE_CHANGE + LESS_OR_EQUAL(negative number)
Subtypes: - AlertMetricSpecificValueComparator - AlertMetricValueInRangeComparator - AlertMetricValueNotInRangeComparator
- GREATER
- GREATER_OR_EQUAL
- EQUAL
- NOT_EQUAL
- LESS_OR_EQUAL
- LESS
- BETWEEN
- NOT_BETWEEN
Filters to be applied before computing the alert. Exact type depends on metricType
, see mapping in AlertMetricTypeToFilterMapping
{ "metadata": { "pagination": { … } }, "alerts": [ { … } ] }
if alertId
is NOT specified, assignedToAlert
is ignored. if alertId
IS specified assignedToAlert
has 3 states: when TRUE - only items assigned to the specified alert will be returned; when FALSE - only NOT assigned; when NOT specified or NULL - both assigned and not assigned items will be returned
ID of the item that can have assigned Alert(s) onto it. See also AlertAssignmentTypeEnum
non-empty array of labels present on an item, works as "item has all specified labels" filter
- ObservePoint Production API
https://api.observepoint.com/v3/alerts/target-items/{itemType}/search
- curl
- JavaScript
- Node.js
- Python
- Java
- C#
- PHP
- Go
- Ruby
- R
- Payload
curl -i -X POST \
'https://api.observepoint.com/v3/alerts/target-items/{itemType}/search?size=50&page=0&sortBy=IS_ASSIGNED&sortDesc=false' \
-H 'Authorization: YOUR_API_KEY_HERE' \
-H 'Content-Type: application/json' \
-d '{
"alertId": 0,
"assignedToAlert": true,
"itemName": "string",
"itemId": 0,
"itemLabels": [
0
],
"folders": [
{
"folderId": 123,
"domains": [
123
]
}
]
}'
Items (data sources) that may have specified Alert assigned or not assigned
Common metadata for iterable
Total number of items available from all result pages combined
Page size - number of items per result page configured by size
query parameter or default page size
ID of the item that can have assigned Alert(s) onto it. See also AlertAssignmentTypeEnum
Date-time in RFC3339 profile ISO 8601 format with the following additional restrictions:
- An uppercase T must separate the date and time portions.
- An uppercase Z must denote that a numeric time zone offset isn't present.
In general, these timestamp requirements are the same in AWS Step Functions - Choice Rules
{ "metadata": { "pagination": { … } }, "items": [ { … } ] }
ID of the item that can have assigned Alert(s) onto it. See also AlertAssignmentTypeEnum
- ObservePoint Production API
https://api.observepoint.com/v3/alerts/{alertId}/target-items
- curl
- JavaScript
- Node.js
- Python
- Java
- C#
- PHP
- Go
- Ruby
- R
- Payload
curl -i -X PATCH \
'https://api.observepoint.com/v3/alerts/{alertId}/target-items' \
-H 'Authorization: YOUR_API_KEY_HERE' \
-H 'Content-Type: application/json' \
-d '{
"assignmentUpdates": [
{
"scope": "SINGLE_ITEM",
"itemType": "AUDIT",
"itemId": 0,
"operation": "ASSIGN"
}
]
}'
Behaviour per type:
- REPORT_METRIC: sort by name of data/report type corresponding to alert's
metricType
non-empty array of labels present on an alert, works as "alert has all specified labels" filter
- ObservePoint Production API
https://api.observepoint.com/v3/alerts/search/assignments
- curl
- JavaScript
- Node.js
- Python
- Java
- C#
- PHP
- Go
- Ruby
- R
- Payload
curl -i -X POST \
'https://api.observepoint.com/v3/alerts/search/assignments?size=50&page=0&sortBy=ALERT_NAME&sortDesc=false' \
-H 'Authorization: YOUR_API_KEY_HERE' \
-H 'Content-Type: application/json' \
-d '{
"targetItem": {
"itemType": "AUDIT",
"itemId": 0,
"isAssigned": true
},
"search": "string",
"labels": [
0
],
"isDefaultForNewDataSources": true
}'
Assignments
Common metadata for iterable
Total number of items available from all result pages combined
Page size - number of items per result page configured by size
query parameter or default page size
Deprecated metric types:
- ACCOUNT_USAGE_THIS_MONTH_AUDIT_PAGE_SCANNED_COUNT
- ACCOUNT_USAGE_12_MONTH_AUDIT_PAGE_SCANNED_COUNT
- ACCOUNT_USAGE_12_MONTH_WJ_RUN_COUNT
- ACCOUNT_USAGE_THIS_MONTH_WJ_RUN_COUNT
- ACCOUNT_USAGE_LAST_30_DAYS_LOGIN_USER_COUNT
- PAGE_SUMMARY_FAILED_RULE_COUNT
{ "metadata": { "pagination": { … } }, "alerts": [ { … } ] }
- ObservePoint Production API
https://api.observepoint.com/v3/alerts/assignments/{itemType}/{itemId}
- curl
- JavaScript
- Node.js
- Python
- Java
- C#
- PHP
- Go
- Ruby
- R
- Payload
curl -i -X PATCH \
'https://api.observepoint.com/v3/alerts/assignments/{itemType}/{itemId}' \
-H 'Authorization: YOUR_API_KEY_HERE' \
-H 'Content-Type: application/json' \
-d '{
"assignmentUpdates": [
{
"alertId": 0,
"operation": "ASSIGN"
}
]
}'