demisto / demisto-py

Demisto Client for Python
Apache License 2.0
70 stars 41 forks source link

Cannot get report by ID with latest report data via HTTP, just the form UI constructs of the report without data #115

Closed RUXperienced closed 1 year ago

RUXperienced commented 1 year ago

Hello,

I have tried a few variations of this as I cannot leverage python for this activity. When I attempt this as specified, I never get the report contents returned in the query. How do I get the reports contents returned to me in an API HTTP call without python?

I am attempting to call the Rest API to pull a reports contents, any report will be fine so long as I can see and parse its contents.

When I call https://(xsoar-servername/reports using the following https://github.com/demisto/demisto-py/blob/master/docs/DefaultApi.md#download_latest_report, I seem to see all the form UI elements returned but not the report itself, just the name of the report. I can also drill down visually into areas with records like, decoder, recipients and sections, each with more records to drill down into like layout, query and automation. However, nowhere can I visually get to the report contents itself. I can even see the headers I have chosen for the report but nowhere is actual report.

I need to perform this request all within an HTTP request and cannot use cURL. If I can be sure "the latest" report always has the same file ID, I'm more than happy to bypass the reports API and go right to the download file API, however I am not sure what the report would be under that context.

TL;DR BTW, this is Microsoft PowerBI shown. Notice I am already authorized to the source URI and navigated into the data after converting it to a table. Typically, there is a record somewhere in a URL like this, which contains the actual report contents, from which I would break a table back out into and navigate, transform appropriately. When looking at PAN XSOAR, there doesn't appear to be a means to get to the report itself, even when specifying the ID of the report, it still doesn't contain the actual contents.

image

DeanArbel commented 1 year ago

@RUXperienced This API in question uses the /report/:id/latest endpoint, which should return the full file. Please see if you're able to run this API directly. If you have further issues, please contact customer support, and they'll further assist.