policyViolationHistoryEntries

Get the lifecycle history of a single policy violation, including status changes and remediation activity, ordered by timestamp descending.

Arguments

Argument	Type	Description
first	Int	Returns the first n elements from the list.
after	String	An opaque cursor returned from a previous query's endCursor field. Pass this value verbatim to retrieve the next page of results.
last	Int	Returns the last n elements from the list.
before	String	An opaque cursor returned from a previous query's startCursor field. Pass this value verbatim to retrieve the previous page of results.
violationId (required)	String!	The ID of the policy violation.
policyType (required)	PolicyType!	The policy type of the violation. Must match the violation's actual policy type.

Returns

PolicyViolationHistoryEntryConnection!

Sample

QueryVariablesExample Response

query PolicyViolationHistoryEntries($violationId: String!, $policyType: PolicyType!) {
  policyViolationHistoryEntries(
    violationId: $violationId
    policyType: $policyType
    first: 10
  ) {
    nodes {
      actorName
      eventType
      timestamp
    }
    pageInfo {
      hasNextPage
      endCursor
    }
  }
}

{
  "violationId": "example-string",
  "policyType": "POLICY_TYPE_CROWDSTRIKE"
}

{
  "data": {
    "policyViolationHistoryEntries": {
      "nodes": [
        [
          {
            "actorName": "example-string",
            "eventType": "HISTORY_EVENT_CREATED",
            "timestamp": "2024-01-01T00:00:00.000Z"
          }
        ]
      ],
      "pageInfo": {
        "endCursor": "example-string",
        "hasNextPage": true,
        "hasPreviousPage": true,
        "startCursor": "example-string"
      }
    }
  }
}