Palo Alto Networks · Example Payload

Dlp Api Incident Summary Example

Cloud SecurityCybersecurityFirewallNetwork SecuritySASESOARThreat IntelligenceXDR

Dlp Api Incident Summary Example is an example object payload from Palo Alto Networks, with 8 top-level fields. It illustrates the shape of data this provider's APIs accept or return.

Top-level fields

total_incidentsopen_incidentsresolved_incidentsby_severityby_channeltop_data_patternstop_usersreporting_period

Example Payload

Raw ↑ 
{
  "total_incidents": 760,
  "open_incidents": 872,
  "resolved_incidents": 451,
  "by_severity": {
    "critical": 64,
    "high": 522,
    "medium": 376,
    "low": 555,
    "informational": 34
  },
  "by_channel": {
    "web": 642,
    "ssl": 161,
    "saas": 930,
    "email": 755,
    "endpoint": 685
  },
  "top_data_patterns": [
    {
      "pattern_name": "Corporate Policy 13",
      "incident_count": 612
    },
    {
      "pattern_name": "Staging Connector 47",
      "incident_count": 330
    },
    {
      "pattern_name": "Remote Firewall 67",
      "incident_count": 400
    }
  ],
  "top_users": [
    {
      "user": "jane.doe",
      "incident_count": 504
    }
  ],
  "reporting_period": {
    "start_time": "2025-10-26T10:53:57Z",
    "end_time": "2024-05-26T01:43:07Z"
  }
}