Need help on rest api call to ignore one service account actions

HI All,
We have a rest api call made to delete the expired actions but we want to exclude the expired actions of one service account eg named ‘abcd’, please help me to form a rest call which will delete the expired actions ignoring one service account in console:-1:

iem get query --relevance “unique values of (if (group member flag of it) then (id of parent group of it as string) else id of it as string) of bes actions whose (state of it=%22Expired%22)”

We can use name of issuer of <bes action> as an additional filter here in the whose clause with something like:

iem get query --relevance "unique values of (if (group member flag of it) then (id of parent group of it as string) else id of it as string) of bes actions whose (state of it=%22Expired%22 AND name of issuer of it != %22abcd%22)"

References:

First issuer of <bes action, which returns a <bes user> object
https://developer.bigfix.com/relevance/reference/bes-action.html#issuer-of-bes-action-bes-user

Then name of <bes user>:
https://developer.bigfix.com/relevance/reference/bes-user.html#name-of-bes-user-string

1 Like