API call to get operator that initiated action

Customizations
2

You may have to use a session relevance query using the bes action object and the bes user object

http://mybigfixserver:52311/api/query?relevance=name of issuer of bes action whose (id of it is 36)

GIves

<BESAPI xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="BESAPI.xsd">
<Query Resource="name of issuer of bes action whose (id of it is 36)">
<Result>
<Answer type="string">BESAdmin</Answer>
</Result>
<Evaluation>
<Time>1.586ms</Time>
<Plurality>Singular</Plurality>
</Evaluation>
</Query>
</BESAPI>

Or if you choose the json output option in 9.2.5+, see: IBM BigFix 9.1 REST API Serve in JSON?

{"result":["BESAdmin"],"plural":false,"type":"string","evaltime_ms":0}

http://support.bigfix.com/inspectors/Session%20Objects_Any.html#bes%20action
http://support.bigfix.com/inspectors/Session%20Objects_Any.html#bes%20user

1 Like