# General APIs

## Timezone

The **Timezone** API allows you to list all the time zones available for Fabric-enabled LogPoints.

<table data-header-hidden><thead><tr><th width="254.8333740234375"></th><th></th></tr></thead><tbody><tr><td><strong>Endpoint</strong></td><td><strong>Description</strong></td></tr><tr><td>List</td><td>Lists time zones available for the Fabric-enabled LogPoint.</td></tr></tbody></table>

## Certificate

The **Certificate** API allows you to list the authorization certificates.

<table data-header-hidden><thead><tr><th width="249"></th><th></th></tr></thead><tbody><tr><td><strong>Endpoint</strong></td><td><strong>Description</strong></td></tr><tr><td>FetchUserSSHCertificate</td><td>Fetches the SSH public key of the Fabric-enabled LogPoint user with the given ID.</td></tr><tr><td>List</td><td>Lists the public key of the given Fabric-enabled LogPoint for SCP.</td></tr><tr><td>ListSystemSSHCertificate</td><td>Lists the SSH public key of the given Fabric-enabled LogPoint.</td></tr></tbody></table>

## RefreshToken

The **RefreshToken** API allows you to generate a new token and a secret key for the Director Console API.

<table data-header-hidden><thead><tr><th width="252.33331298828125"></th><th></th></tr></thead><tbody><tr><td><strong>Endpoint</strong></td><td><strong>Description</strong></td></tr><tr><td>Create</td><td>Generates a new token and a secret key for the Public facing API.</td></tr></tbody></table>

Note

Refer to the [Refresh Token from API](https://docs.logpoint.com/director/director-v2.9/director-authentication#refreshing-a-token-from-api) section for more details on refresh token.

## Director

The **Director** API allows you to fetch the health status and versions of the Director components.

<table data-header-hidden><thead><tr><th width="247.33331298828125"></th><th></th></tr></thead><tbody><tr><td><strong>Endpoint</strong></td><td><strong>Description</strong></td></tr><tr><td>GetHealth</td><td>Fetches the health status on the basis of version compatibility of the API Server and the Fabric Server(s).</td></tr><tr><td>GetVersion</td><td>Fetches the version of the Director components.</td></tr></tbody></table>

## PluginConfiguration

The **PluginConfiguration** API allows you to configure various pluggable plugins for a Fabric-enabled LogPoint from the Director Console API.

<table data-header-hidden><thead><tr><th width="254.8333740234375"></th><th></th></tr></thead><tbody><tr><td><strong>Endpoint</strong></td><td><strong>Description</strong></td></tr><tr><td>Create</td><td>Configures the plugin in a Fabric-enabled LogPoint.</td></tr><tr><td>Edit</td><td>Updates the configurations of a plugin with given ID.</td></tr><tr><td>Get</td><td>Fetches the configurations of a plugin with given ID.</td></tr><tr><td>InstallPlugin</td><td>Installs the given file for the plugin in a Fabric-enabled LogPoint.</td></tr><tr><td>List</td><td>Lists the available plugin configurations.</td></tr><tr><td>ListPlugins</td><td>Lists the pluggable plugins installed in the given logpoint.</td></tr><tr><td>RefreshList</td><td>Syncs the plugin configurations.</td></tr><tr><td>TextExisting</td><td>Tests the existing plugin configurations.</td></tr><tr><td>TestNew</td><td>Tests the newly created plugin configurations.</td></tr><tr><td>Trash</td><td>Deletes the plugin configurations with given ID.</td></tr><tr><td>TrashPrivate</td><td>Deletes the file with given <em>name</em> from the private storage of the plugin.</td></tr><tr><td>TrashPublic</td><td>Deletes the file with given <em>name</em> from the public storage of the plugin.</td></tr><tr><td>UploadPrivateFiles</td><td>Uploads the given file in the private storage of the plugin.</td></tr><tr><td>UploadPublicFiles</td><td>Uploads the given file in the private storage of the plugin.</td></tr><tr><td>UploadsList</td><td>Lists the files in the private storage of the plugin.</td></tr><tr><td>UploadsListPublic</td><td>Lists the files in the private storage of the plugin.</td></tr></tbody></table>

{% hint style="info" %}
Currently, the **PluginConfiguration** API supports the following plugins:

* Threat Intelligence
* CiscoAMP
* StixTaxii
* Microsoft Defender ATP
* CiscoUmbrella
* CSVEnrichmentSource
  {% endhint %}

## Charsets

The **Charsets** API allows you to list the charsets available in the Fabric-enabled LogPoint.

| **Endpoint** | **Description**                                            |
| ------------ | ---------------------------------------------------------- |
| ListCharsets | Lists the available charsets in a Fabric-enabled LogPoint. |

## Query

The **Query** API allows you to validate the given query.

<table data-header-hidden><thead><tr><th width="249.00006103515625"></th><th></th></tr></thead><tbody><tr><td><strong>Endpoint</strong></td><td><strong>Description</strong></td></tr><tr><td>ValidateLabelQuery</td><td>Validates the given search query for creating search labels.  </td></tr><tr><td>ValidateQuery</td><td>Validates the given query.</td></tr></tbody></table>

Refer to the [API Documentation](https://docs.logpoint.com/director/director-apis/director-console-api-documentation) for further details on the usage of the APIs.

## Incidents

The **Incidents** API allows you to fetch and manage the incidents generated in a Fabric-enabled LogPoint.

Incidents help you to identify, analyze, correct, and prevent information hazards in the future. LogPoint generates incidents either on an ad hoc basis from the search logs or by pre-defined alert rules.

<table data-header-hidden><thead><tr><th width="253.16668701171875"></th><th></th></tr></thead><tbody><tr><td><strong>Endpoint</strong></td><td><strong>Description</strong></td></tr><tr><td>Close</td><td>Closes the incident with the given ID on behalf of a Fabric-enabled LogPoint user.</td></tr><tr><td>Comment</td><td>Adds comment on the incident with the given ID on behalf of a Fabric-enabled LogPoint user.</td></tr><tr><td>FetchIncidentData</td><td>Fetches the data of the incident with the given ID from a Fabric-enabled LogPoint. This endpoint also stores the fetched incident data in the Fabric Storage.</td></tr><tr><td>FetchIncidents</td><td>Fetches the incidents based on the given filter parameters.</td></tr><tr><td>GetIncidentData</td><td>Lists the data of the previously fetched incident with the given ID from the Fabric Storage.</td></tr><tr><td>Reassign</td><td>Reassigns the incident with the given ID to a new user on behalf of a Fabric-enabled LogPoint user.</td></tr><tr><td>Reopen</td><td>Reopens the incident with the given ID on behalf of a Fabric-enabled LogPoint user.</td></tr><tr><td>Resolve</td><td>Resolves the incident with the given ID on behalf of a Fabric-enabled LogPoint user.</td></tr><tr><td>SendForInvestigation</td><td>Manually triggers notifications for the incident with the given ID.</td></tr></tbody></table>

## Diagnosis

The **Diagnosis** API allows you to fetch the system diagnostic information of a Fabric-enabled LogPoint and the Director components. It also allows you to fetch the current status of the various Fabric-enabled LogPoint components and Director components.

<table data-header-hidden><thead><tr><th width="290.66668701171875"></th><th></th></tr></thead><tbody><tr><td><strong>Endpoint</strong></td><td><strong>Description</strong></td></tr><tr><td>GetDirectorDiagnosisAPIStat</td><td>Fetches the system diagnostic information of API Server.</td></tr><tr><td>GetDirectorDiagnosisFabricStat</td><td>Fetches the system diagnostic information of Fabric Server.</td></tr><tr><td>GetDirectorDiagnosisLPSMStat</td><td>Fetches the system diagnostic information of LogPoint Search Master.</td></tr><tr><td>GetHealth</td><td>Fetches the health status on the basis of version compatibility of API Server and Fabric Servers.</td></tr><tr><td>GetVersion</td><td>Fetches the current version of the Director components.</td></tr><tr><td>GetLogpointDiagnosisJava</td><td>Fetches the diagnostic information of the Java processes running in a Fabric-enabled Logpoint.</td></tr><tr><td>GetLogpointDiagnosisNormFront</td><td>Fetches the diagnostic information related to the normalization layer of a Fabric-enabled LogPoint.</td></tr><tr><td>GetLogpointDiagnosisNormalisers</td><td>Fetches the diagnostic information of normalizers in a Fabric-enabled Logpoint.</td></tr><tr><td>GetLogpointDiagnosisPremerger</td><td>Fetches the diagnostic information of premerger in a Fabric-enabled Logpoint.</td></tr><tr><td>GetLogpointDiagnosisStat</td><td>Fetches the system diagnostic information of a Fabric-enabled Logpoint.</td></tr><tr><td>GetLogpointDiagnosisStoreHandler</td><td>Fetches the diagnostic information related to the storage layer of a Fabric-enabled LogPoint.</td></tr><tr><td>GetPoolInfo</td><td>Fetches pool and machine information.</td></tr></tbody></table>

## MitreAttacks

The **MitreAttacks** API allows you to list the MITRE ATT\&CK details available in the Fabric-enabled LogPoint.

<table data-header-hidden><thead><tr><th width="246.5"></th><th></th></tr></thead><tbody><tr><td><strong>Endpoint</strong></td><td><strong>Description</strong></td></tr><tr><td>FetchMitreAttacks</td><td>Lists the MITRE ATT&#x26;CK details available in the Fabric-enabled LogPoint.</td></tr></tbody></table>

## Search

The **Search** API allows you to search and filter logs in a LogPoint based on the given search conditions.

<table data-header-hidden><thead><tr><th width="251.50006103515625"></th><th></th></tr></thead><tbody><tr><td><strong>Endpoint</strong></td><td><strong>Description</strong></td></tr><tr><td>FetchSearchLogs</td><td>Lists the array of logs that match the given search conditions.</td></tr></tbody></table>

{% hint style="info" %}
You can use the *Search* API to filter logs on Fabric-enabled LogPoint v7.0.0 and later.
{% endhint %}

## MachineInfo API

The **MachineInfo** API allows you to list the version history of the patches installed in a Fabric-enabled LogPoint. The API also lists the basic information about the Fabric-enabled LogPoint machine such as its name, current version, and machine type.

<table data-header-hidden><thead><tr><th width="249"></th><th></th></tr></thead><tbody><tr><td><strong>Endpoint</strong></td><td><strong>Description</strong></td></tr><tr><td>List</td><td>Lists the basic information of the LogPoint and version history of the patches installed in the LogPoint.</td></tr></tbody></table>

## HardwareKey API

The **HardwareKey** API allows you to fetch the hardware key of the Fabric-enabled LogPoint machines.

<table data-header-hidden><thead><tr><th width="248.16668701171875"></th><th></th></tr></thead><tbody><tr><td><strong>Endpoint</strong></td><td><strong>Description</strong></td></tr><tr><td>List</td><td>Lists the hardware key of the given LogPoint.</td></tr></tbody></table>
