KSC Open API
Kaspersky Security Center API description
List of incident attributes

List of incident attributes is presented below.

Attribute nameData typeDescription
"KLHST_WKS_HOSTNAME"paramStringHost name. A unique server-generated string. Read-only.
"GNRL_EXTRA_PARAMS"paramParamsApplication-specific attributes. Read-only.
"KLINCDT_ID"paramIntIncident ID. Read-only.
"KLINCDT_SEVERITY"paramIntIncident severity.
"KLINCDT_ADDED"paramDateTimeTime of incident entry creation.
"KLINCDT_BODY"paramStringIncident body. Full-text attribute. See Full-text attribute.
"KLINCDT_IS_HANDLED"paramBool"IsHandled" flag. True if incident marked as "Handled". Otherwise, false.
"KLINCDT_TYPE"paramStringIncident type provided by the managed product.
"KLINCDT_TYPE_DISPLAY_NAME"paramStringIncident name provided by the managed product.
"KLHSTUSER_ID"paramIntUser ID.
"KLHSTUSER_DN"paramStringUser display name.
"KLHSTUSER_PRINCIPAL"paramStringUser principal name.
"KLHSTUSER_SAMNAME"paramStringUser SAM name.
"KLHST_WKS_LID"paramLongAppropriate host internal integer ID.
"KLHST_WKS_WINHOSTNAME"paramStringAppropriate host NetBIOS name. See List of host attributes.
"KLHST_WKS_DN"paramStringAppropriate host display name. See List of host attributes.
"KLHST_WKS_GROUPID"paramIntHost administration group ID.
"KLHST_WKS_GROUPID_GP"paramIntSearch-only attribute. Hosts belongs to the specified group or its subgroup.