Get-RscEventSeries Error #208
Description
I am not sure I am going down the right patch but I submit a request with New-RscMssqlExport the ID that comes back looks nothing like activitySeriesId. I would like to know how do I take the Id that comes back from New-RscMssqlExport and get the activitySeriesId. However back to the error and maybe I am missing something in the example this should have worked but it does not.
PS C:\Users\user> $firstId = (Get-RscEventSeries -First 1).ActivitySeriesId
PS C:\Users\user> Get-RscEventSeries -Id $firstId -Detail
Invoke-Rsc: C:\Program Files (x86)\PowerShell\Modules\RubrikSecurityCloud\1.14.0\Toolkit\Public\Get-RscEventSeries.ps1:172
Line |
172 | $result = Invoke-Rsc $query
| ~~~~~~~~~~~~~~~~~
| One or more errors occurred. (The request generated an error. Query: query QueryActivitySeries($input: ActivitySeriesInput!) { activitySeries
| ( input: $input ) { lastActivityStatus lastActivityType objectType severity activitySeriesId attemptNumber causeErrorCode
| causeErrorMessage causeErrorReason causeErrorRemedy clusterName clusterUuid dataTransferred effectiveThroughput failureReason fid
| id isCancelable isOnDemand isPolarisEventSeries isTransactionLogEventSeries lastActivityMessage lastEventAddedAt lastUpdated
| lastVerifiedAt location logicalSize objectId objectName orgId orgName progress startTime urlMetadata activityConnection
| (after:null,before:null,first:null,last:null) { count nodes { objectType severity status type
| activityInfo clusterId errorInfo id message objectId progress time __typename }
| pageInfo { endCursor hasNextPage hasPreviousPage startCursor __typename } __typename } cluster {
| cyberEventLockdownMode eosStatus licensedProducts pauseStatus productType registeredMode status statusFromDb
| subStatus systemStatus type cdmRbacMigrationStatus connectivityLastUpdated defaultAddress defaultPort
| encryptionEnabled eosDate estimatedRunway id isAirGapped isClusterRemovalTprEnabled isHealthy isTprEnabled
| lastConnectionTime name noSqlWorkloadCount passesConnectivityCheck rawAddress registrationTime snapshotCount
| systemStatusMessage timezone version activitySeriesConnection
| (after:null,before:null,filters:null,first:null,last:null,sortBy:null) { count nodes { lastActivityStatus
| lastActivityType objectType severity activitySeriesId attemptNumber causeErrorCode
| causeErrorMessage causeErrorReason causeErrorRemedy clusterName clusterUuid dataTransferred
| effectiveThroughput failureReason fid id isCancelable isOnDemand isPolarisEventSeries
| isTransactionLogEventSeries lastActivityMessage lastEventAddedAt lastUpdated lastVerifiedAt
| location logicalSize objectId objectName orgId orgName progress startTime
| urlMetadata __typename } pageInfo { endCursor hasNextPage hasPreviousPage startCursor
| __typename } __typename } allOrgs { authDomainConfig crossAccountCapabilities mfaStatus
| tenantNetworkHealth allUrls allowedClusters description fullName hasOwnIdpConfigured id
| isEnvoyRequired isInheritIpAllowlistDisabled isServiceAccountDisabled name physicalStorageUsed
| replicationOnlyClusters shouldEnforceMfaForAll __typename } authorizedOperations { operations workloadHierarchy
| id __typename } ccprovisionInfo { jobStatus jobType vendor marshaledConfig progress __typename }
| cdmClusterNodeDetails { clusterId dataIpAddress ipmiIpAddress nodeId __typename }
| cdmNotificationSettings { hasMore nextCursor total data { emailAddresses eventTypes id
| objectTypes severity shouldSendToSyslog snmpAddresses __typename } __typename } cdmUpgradeInfo {
| clusterJobStatus versionStatus clusterUuid currentStateProgress downloadedVersion fastUpgradePreferred
| finishedStates overallProgress pendingStates previousVersion scheduleUpgradeAction scheduleUpgradeAt
| scheduleUpgradeMode stateMachineStatus stateMachineStatusAt upgradeEndAt upgradeEventSeriesId upgradeStartAt
| version __typename } cloudInfo { vendor cloudAccount cloudAccountId name nativeCloudAccountId
| nativeCloudAccountName networkName region regionId uuid __typename } clusterDiskConnection
| (after:null,before:null,filter:null,first:null,last:null) { count nodes { diskType status
| capacityBytes clusterId diskId id isEncrypted isResizable ledStatus nodeId
| path serial unallocatedBytes usableBytes __typename } pageInfo { endCursor hasNextPage
| hasPreviousPage startCursor __typename } __typename } clusterNodeConnection
| (after:null,before:null,filter:null,first:null,last:null,sortBy:null,sortOrder:null) { count nodes { platformType
| position status brikId clusterId cpuCores hostname id ipAddress
| needsInspection networkSpeed ram __typename } pageInfo { endCursor hasNextPage
| hasPreviousPage startCursor __typename } __typename } clusterNodeStats (cdmClusterNodeID:null,timeRange:null) {
| clusterId clusterPhysicalDataIngest cpuStat iopsReadsPerSecond iopsWritesPerSecond networkBytesReceived
| networkBytesTransmitted nodeId readThroughputBytesPerSecond time usedMemoryStat
| writeThroughputBytesPerSecond __typename } configProtectionInfo { configProtectionStatus uploadLocation caCertUuid
| clusterUuid lastSuccessfulBackupTime replicationTargetName __typename } cyberEventLockdownSupportCaseDetails { caseId
| caseLink caseNumber clusterUuid __typename } datagovPreviewerConfig { clusterId enabled __typename }
| geoLocation { address latitude longitude __typename } ipmiInfo { isAvailable usesHttps usesIkvm
| __typename } lambdaConfig { accountId clusterId defaultDiffFmdUploadPrefix enableAutomaticFmdUpload
| enableFmdUploadForAllResources enableThreatMonitoringFullScan isThreatMonitoringEnabled maxSnapshotsToUploadAutomatically
| __typename } lambdaFeatureHistory { wasRansomwareInvestigationEverEnabled wasSensitiveDataDiscoveryEverEnabled __typename }
| metric { availableCapacity averageDailyGrowth cdpCapacity ingestedArchivalStorage ingestedSnapshotStorage
| lastUpdateTime liveMountCapacity miscellaneousCapacity pendingSnapshotCapacity physicalArchivalStorage
| physicalSnapshotStorage snapshotCapacity totalCapacity usedCapacity __typename } metricTimeSeriesNew
| (timeRange:null,unit:null) { clusterUuid __typename } replicationSources { id sourceClusterAddress
| sourceClusterName sourceClusterUuid totalStorage __typename } replicationTargets { id
| targetClusterAddress targetClusterName targetClusterUuid totalStorage __typename } rubrikSyncStatus {
| clusterSyncLastSuccessTime eventsSyncLastSuccessTime isClusterSyncHealthy isEventsSyncHealthy isJobMonitoringSyncHealthy
| isMetadataSyncHealthy isReportsSyncHealthy jobMonitoringSyncLastSuccessTime objectMetadataSyncLastSuccessTime
| reportsSyncLastSuccessTime __typename } snappableConnection (after:null,before:null,filter:null,first:null,last:null) { count
| nodes { archivalComplianceStatus complianceStatus objectState objectType protectionStatus
| replicationComplianceStatus archivalSnapshotLag archiveSnapshots archiveStorage awaitingFirstFull
| dataReduction fid id lastSnapshot lastSnapshotLogicalBytes latestArchivalSnapshot
| latestReplicationSnapshot localEffectiveStorage localMeteredData localOnDemandSnapshots
| localProtectedData localSlaSnapshots localSnapshots localStorage location logicalBytes
| logicalDataReduction missedSnapshots name ncdLatestArchiveSnapshot ncdPolicyName
| ncdSnapshotType orgId orgName physicalBytes protectedOn provisionedBytes pullTime
| replicaSnapshots replicaStorage replicationSnapshotLag sourceProtocol totalSnapshots
| transferredBytes usedBytes __typename } pageInfo { endCursor hasNextPage hasPreviousPage
| startCursor __typename } __typename } state { clusterRemovalState connectedState clusterRemovalCreatedAt
| clusterRemovalUpdatedAt __typename } systemStatusAffectedNodes { platformType position status brikId
| clusterId cpuCores hostname id ipAddress needsInspection networkSpeed ram __typename
| } webServerCertificate { isConfiguredWithCaSignedCertificate __typename } __typename } organizations { authDomainConfig
| crossAccountCapabilities mfaStatus tenantNetworkHealth allUrls allowedClusters description fullName
| hasOwnIdpConfigured id isEnvoyRequired isInheritIpAllowlistDisabled isServiceAccountDisabled name
| physicalStorageUsed replicationOnlyClusters shouldEnforceMfaForAll allClusterCapacityQuotas { currentUsageGb
| __typename } orgAdminRole { alreadySyncedClusters description explicitProtectableClusters id
| isOrgAdmin isReadOnly isSynced name orgId protectableClusters __typename } permissions {
| operation __typename } selfServicePermissions { inventoryRoot inventoryWorkloadType operations
| hierarchyRoot __typename } ssoGroups { authDomainName id isOrgAdmin name __typename }
| users { id isOrgAdmin __typename } __typename } __typename } __typename } Variables:
| {"input":{"activitySeriesId":"4ee2f0bf-ca1c-4e39-a986-8c9d2d90c7b9"}} Operation Name: QueryActivitySeries GraphQLResponse: Data: null
| Errors: null HTTP Status Code: 400 BadRequest [QueryAnalysisError] [Events Team] Encountered Client error (400) executing query with
| operations: [QueryActivitySeries] and variables {"input":{"activitySeriesId":"4ee2f0bf-ca1c-4e39-a986-8c9d2d90c7b9"}}. Error: Query does not pass
| validation. Violations: Expected type 'TimeUnitEnum!', found 'null'. (line 359, column 24): (timeRange:null,unit:null)
| ^) The request generated an error. Query: query QueryActivitySeries($input: ActivitySeriesInput!) { activitySeries ( input: $input ) {
| lastActivityStatus lastActivityType objectType severity activitySeriesId attemptNumber causeErrorCode causeErrorMessage
| causeErrorReason causeErrorRemedy clusterName clusterUuid dataTransferred effectiveThroughput failureReason fid id isCancelable
| isOnDemand isPolarisEventSeries isTransactionLogEventSeries lastActivityMessage lastEventAddedAt lastUpdated lastVerifiedAt
| location logicalSize objectId objectName orgId orgName progress startTime urlMetadata activityConnection
| (after:null,before:null,first:null,last:null) { count nodes { objectType severity status type
| activityInfo clusterId errorInfo id message objectId progress time __typename }
| pageInfo { endCursor hasNextPage hasPreviousPage startCursor __typename } __typename } cluster {
| cyberEventLockdownMode eosStatus licensedProducts pauseStatus productType registeredMode status statusFromDb
| subStatus systemStatus type cdmRbacMigrationStatus connectivityLastUpdated defaultAddress defaultPort
| encryptionEnabled eosDate estimatedRunway id isAirGapped isClusterRemovalTprEnabled isHealthy isTprEnabled
| lastConnectionTime name noSqlWorkloadCount passesConnectivityCheck rawAddress registrationTime snapshotCount
| systemStatusMessage timezone version activitySeriesConnection
| (after:null,before:null,filters:null,first:null,last:null,sortBy:null) { count nodes { lastActivityStatus
| lastActivityType objectType severity activitySeriesId attemptNumber causeErrorCode
| causeErrorMessage causeErrorReason causeErrorRemedy clusterName clusterUuid dataTransferred
| effectiveThroughput failureReason fid id isCancelable isOnDemand isPolarisEventSeries
| isTransactionLogEventSeries lastActivityMessage lastEventAddedAt lastUpdated lastVerifiedAt
| location logicalSize objectId objectName orgId orgName progress startTime
| urlMetadata __typename } pageInfo { endCursor hasNextPage hasPreviousPage startCursor
| __typename } __typename } allOrgs { authDomainConfig crossAccountCapabilities mfaStatus
| tenantNetworkHealth allUrls allowedClusters description fullName hasOwnIdpConfigured id
| isEnvoyRequired isInheritIpAllowlistDisabled isServiceAccountDisabled name physicalStorageUsed
| replicationOnlyClusters shouldEnforceMfaForAll __typename } authorizedOperations { operations workloadHierarchy
| id __typename } ccprovisionInfo { jobStatus jobType vendor marshaledConfig progress __typename }
| cdmClusterNodeDetails { clusterId dataIpAddress ipmiIpAddress nodeId __typename }
| cdmNotificationSettings { hasMore nextCursor total data { emailAddresses eventTypes id
| objectTypes severity shouldSendToSyslog snmpAddresses __typename } __typename } cdmUpgradeInfo {
| clusterJobStatus versionStatus clusterUuid currentStateProgress downloadedVersion fastUpgradePreferred
| finishedStates overallProgress pendingStates previousVersion scheduleUpgradeAction scheduleUpgradeAt
| scheduleUpgradeMode stateMachineStatus stateMachineStatusAt upgradeEndAt upgradeEventSeriesId upgradeStartAt
| version __typename } cloudInfo { vendor cloudAccount cloudAccountId name nativeCloudAccountId
| nativeCloudAccountName networkName region regionId uuid __typename } clusterDiskConnection
| (after:null,before:null,filter:null,first:null,last:null) { count nodes { diskType status
| capacityBytes clusterId diskId id isEncrypted isResizable ledStatus nodeId
| path serial unallocatedBytes usableBytes __typename } pageInfo { endCursor hasNextPage
| hasPreviousPage startCursor __typename } __typename } clusterNodeConnection
| (after:null,before:null,filter:null,first:null,last:null,sortBy:null,sortOrder:null) { count nodes { platformType
| position status brikId clusterId cpuCores hostname id ipAddress
| needsInspection networkSpeed ram __typename } pageInfo { endCursor hasNextPage
| hasPreviousPage startCursor __typename } __typename } clusterNodeStats (cdmClusterNodeID:null,timeRange:null) {
| clusterId clusterPhysicalDataIngest cpuStat iopsReadsPerSecond iopsWritesPerSecond networkBytesReceived
| networkBytesTransmitted nodeId readThroughputBytesPerSecond time usedMemoryStat
| writeThroughputBytesPerSecond __typename } configProtectionInfo { configProtectionStatus uploadLocation caCertUuid
| clusterUuid lastSuccessfulBackupTime replicationTargetName __typename } cyberEventLockdownSupportCaseDetails { caseId
| caseLink caseNumber clusterUuid __typename } datagovPreviewerConfig { clusterId enabled __typename }
| geoLocation { address latitude longitude __typename } ipmiInfo { isAvailable usesHttps usesIkvm
| __typename } lambdaConfig { accountId clusterId defaultDiffFmdUploadPrefix enableAutomaticFmdUpload
| enableFmdUploadForAllResources enableThreatMonitoringFullScan isThreatMonitoringEnabled maxSnapshotsToUploadAutomatically
| __typename } lambdaFeatureHistory { wasRansomwareInvestigationEverEnabled wasSensitiveDataDiscoveryEverEnabled __typename }
| metric { availableCapacity averageDailyGrowth cdpCapacity ingestedArchivalStorage ingestedSnapshotStorage
| lastUpdateTime liveMountCapacity miscellaneousCapacity pendingSnapshotCapacity physicalArchivalStorage
| physicalSnapshotStorage snapshotCapacity totalCapacity usedCapacity __typename } metricTimeSeriesNew
| (timeRange:null,unit:null) { clusterUuid __typename } replicationSources { id sourceClusterAddress
| sourceClusterName sourceClusterUuid totalStorage __typename } replicationTargets { id
| targetClusterAddress targetClusterName targetClusterUuid totalStorage __typename } rubrikSyncStatus {
| clusterSyncLastSuccessTime eventsSyncLastSuccessTime isClusterSyncHealthy isEventsSyncHealthy isJobMonitoringSyncHealthy
| isMetadataSyncHealthy isReportsSyncHealthy jobMonitoringSyncLastSuccessTime objectMetadataSyncLastSuccessTime
| reportsSyncLastSuccessTime __typename } snappableConnection (after:null,before:null,filter:null,first:null,last:null) { count
| nodes { archivalComplianceStatus complianceStatus objectState objectType protectionStatus
| replicationComplianceStatus archivalSnapshotLag archiveSnapshots archiveStorage awaitingFirstFull
| dataReduction fid id lastSnapshot lastSnapshotLogicalBytes latestArchivalSnapshot
| latestReplicationSnapshot localEffectiveStorage localMeteredData localOnDemandSnapshots
| localProtectedData localSlaSnapshots localSnapshots localStorage location logicalBytes
| logicalDataReduction missedSnapshots name ncdLatestArchiveSnapshot ncdPolicyName
| ncdSnapshotType orgId orgName physicalBytes protectedOn provisionedBytes pullTime
| replicaSnapshots replicaStorage replicationSnapshotLag sourceProtocol totalSnapshots
| transferredBytes usedBytes __typename } pageInfo { endCursor hasNextPage hasPreviousPage
| startCursor __typename } __typename } state { clusterRemovalState connectedState clusterRemovalCreatedAt
| clusterRemovalUpdatedAt __typename } systemStatusAffectedNodes { platformType position status brikId
| clusterId cpuCores hostname id ipAddress needsInspection networkSpeed ram __typename
| } webServerCertificate { isConfiguredWithCaSignedCertificate __typename } __typename } organizations { authDomainConfig
| crossAccountCapabilities mfaStatus tenantNetworkHealth allUrls allowedClusters description fullName
| hasOwnIdpConfigured id isEnvoyRequired isInheritIpAllowlistDisabled isServiceAccountDisabled name
| physicalStorageUsed replicationOnlyClusters shouldEnforceMfaForAll allClusterCapacityQuotas { currentUsageGb
| __typename } orgAdminRole { alreadySyncedClusters description explicitProtectableClusters id
| isOrgAdmin isReadOnly isSynced name orgId protectableClusters __typename } permissions {
| operation __typename } selfServicePermissions { inventoryRoot inventoryWorkloadType operations
| hierarchyRoot __typename } ssoGroups { authDomainName id isOrgAdmin name __typename }
| users { id isOrgAdmin __typename } __typename } __typename } __typename } Variables:
| {"input":{"activitySeriesId":"4ee2f0bf-ca1c-4e39-a986-8c9d2d90c7b9"}} Operation Name: QueryActivitySeries GraphQLResponse: Data: null
| Errors: null HTTP Status Code: 400 BadRequest [QueryAnalysisError] [Events Team] Encountered Client error (400) executing query with
| operations: [QueryActivitySeries] and variables {"input":{"activitySeriesId":"4ee2f0bf-ca1c-4e39-a986-8c9d2d90c7b9"}}. Error: Query does not pass
| validation. Violations: Expected type 'TimeUnitEnum!', found 'null'. (line 359, column 24): (timeRange:null,unit:null)