Qualys Cloud Platform 3.7.1 (FIM) API notification 1

A new release of Qualys Cloud Platform 3.7.1 (FIM) includes updated APIs which is targeted for release in July 2023. The specific day will differ depending on the platform. See platform release dates on the Qualys Status page. This API notification provides an early preview into the coming API, allowing you to identify use cases that can leverage this updated API.

What’s New
Two New Fields to Filter FIM API Events
/fim/v2/events/search
/fim/v2/events/ignore/search
/fim/v2/events/count
/fim/v2/events/ignore/count
/fim/v2/incidents/{incidentId}/events/count
/fim/v2/incidents/{incidentId}/events/search
We have introduced two new filters for event search and event count APIs. Using the
additional fields, you can now filter the events based on changes made in the attributes of
a file or directory. The fields are: file.attribute.hidden and file.attribute.readonly

New Add on Parameters in Response of Event Search
/fim/v2/events/search
/fim/v2/events/ignore/search
/fim/v2/incidents/{incidentId}/events/search
We added new fields in the response of event search and event count APIs. The fields are volumeID, fileID, securitySettings, fileContentHashOld, size, attributes, permissions, ownerShip, group, and fileAttribute. With these fields user can see the data of Event Detail in search.

Added Validation on Number of Incidents in Create Manual API
/fim/v3/incidents/create

We noticed performance issues due to an unrestricted count of events in manual incident.
Additionally, it affected the processing of FIM events on the platform. Therefore we added
limitation on the number of events while creating manual incident. With this release,
manual incident can be created with up to 100k events.

The release notes are here: https://www.qualys.com/docs/release-notes/qualys-fim-3.7.1-api-release-notes.pdf