Events are not getting forwarded through TestPushEvent API

madhav_pandya
madhav_pandya
in Enterprise Security

I am currently using the free trial of Bitdefender's EDR product and have configured push notifications as per the API documentation. I’ve subscribed to all available event types, and the API responds with a 200 status code and a "true" status.

I attempted to send a test event using the TestPushEvent API. While I'm receiving a 200 response, only the event types aph and av are being forwarded, and the other event types are not.

Here is the response of the GetPushEventStats API


{
"id": "ad12cb61-52b3-4209-a87a-93a8530d91cb",
"jsonrpc": "2.0",
"result": {
"count": {
"errorMessages": 8,
"events": 0,
"sentBytes": 0,
"sentMessages": 0,
"testEvents": 8
},
"error": {
"configurationError": 0,
"connectionError": 0,
"serviceError": 0,
"statusCode2xx": 8,
"statusCode300": 0,
"statusCode400": 0,
"statusCode500": 0,
"timeout": 0
},
"lastUpdateTime": "2024-10-29T08:07:51",
"max": {
"messageQueueBytes": 4800,
"messageQueueLength": 8
}
}
}

Could someone help me understand the potential issue here? I’m wondering if this could be related to data generation, licensing limitations, message queue or another factor. Has anyone encountered a similar issue, and if so, are there any known solutions?

Comments

  • Andrei_S Enterprise
    Andrei_S Enterprise BD Staff

    Hello @madhav_pandya,

    We need to check in the backend what is the reason you only get aph and av event types as the response does not tell us this information.

    Please open a case with our support and add the API request used and the response and an enterprise support engineer will be able to look into it.

    https://www.bitdefender.com/en-us/support/contact-us?last_page=BusinessCategory

    Kind Regards,

    Andrei

  • madhav_pandya
    madhav_pandya
    edited October 29

    Hello @Andrei_S Enterprise , I have already raised the support case for this.

     Case ID - 00910924

    Here is the request and response of the sendTestPushEvent API

    Request URL : {{bitdefender_access_url}}/v1.0/jsonrpc/push

    Requst Body : 

    {
    
    "params": {
    
        "eventType": "dp",
    
        "data": {
    
            "last_blocked": "2024-10-29T07:06:43.000Z"
    
        }
    
    },
    
    "jsonrpc": "2.0",
    
    "method": "sendTestPushEvent",
    
    "id": "test_1"
    
}

    Response : 

    {
    
    "id": "test_1",
    
    "jsonrpc": "2.0",
    
    "result": {
    
        "computer_name": "FC-WIN7-X64-01",
    
        "computer_fqdn": "fc-win7-x64-01",
    
        "computer_ip": "192.168.0.1",
    
        "computer_id": "59a1604e60369e06733f8abb",
    
        "product_installed": "BEST",
    
        "target_type": "http",
    
        "blocking_rule_name": "dv",
    
        "url": "http://example.com/",
    
        "status": "data_protection_blocked",
    
        "last_blocked": "2024-10-29T07:06:43.000Z",
    
        "count": 1,
    
        "companyId": "670630bd6e50cec1220da972",
    
        "module": "dp",
    
        "_testEvent_": true
    
    }
    
}

    still this event is not ingested. instead of this aph or av type event is ingested.

    we referred this API document : https://www.bitdefender.com/business/support/en/77209-135321-sendtestpushevent.html

  • Andrei_S Enterprise
    Andrei_S Enterprise BD Staff

    Hi,

    Thank you for share the case with me, I will work with the case owner to assist you.

    Kind Regards,

    Andrei

All Time Leaders

Categories

Defenders of the month