Microsoft Graph Security API results

Question

Hello,

With the Graph Security API /alerts endpoint url, I receive alerts info but some fields are not filled in the response. As an example, in the screenshot there is no value for the field "privateIpAddress".

Is there a reason why some fields never have value, is it a permissions or an API issue?

Answer 1

Some properties are “required”, such as alert.id. Other properties, if not explicitly documented, are “optional”, i.e., they are not presented (or be null) when there is no such information.

For the property privateIpAddress, if the alert provider does not have the information, then that property is skipped or null. The alert only contains information what the alert providers know.

Let us know if this answer was helpful to you. If so, please remember to mark it as the answer so that others in the community with similar questions can more easily find a solution.