Armis

Use the Armis integration to search alerts and devices, tag and untag devices, and set alert statuses.

Utilities · Armis

Configuration parameters

  • url — Server URL (required)
  • isFetch — Fetch incidents
  • incidentType — Incident type
  • max_fetch — Maximum number of incidents per fetch
  • alert_status — Fetch alerts with status (UNHANDLED,SUPPRESSED,RESOLVED)
  • alert_type — Fetch alerts with type
  • min_severity — Minimum severity of alerts to fetch (required)
  • first_fetch — First fetch time
  • insecure — Trust any certificate (not secure)
  • secret — Secret API Key (required)
  • free_fetch_string — Fetch Alerts AQL
  • proxy — Use system proxy settings

Commands (7)

  • armis-search-alerts

    Search Armis alerts.

  • armis-search-alerts-by-aql-string

    Search the alerts with a raw AQL string.

  • armis-search-devices

    Search devices by identifiers.

  • armis-search-devices-by-aql

    Search devices with a custom AQL search string.

  • armis-tag-device

    Add a tag to a device.

  • armis-untag-device

    Remove a tag from a device.

  • armis-update-alert-status

    Update the status for an alert.