Webroot® Unity API

I recently upgraded the webroot reporting tool and tried to re-run reports which had run fine in the past.  The reports fail (the templates are unmodified from previous templates).  Here is the log:  :: INFORMATION [2025-09-24 19:54:29Z] Log file created :: INFORMATION [2025-09-24 19:54:31Z] Getting all sites for GSM console SA24GSMTAB8ED99963F5 via Unity ...  :: INFORMATION [2025-09-24 19:54:33Z] Number of sites returned: 65  :: INFORMATION [2025-09-24 19:54:34Z] Processing {customer name}  ({customer id}) ...  :: INFORMATION [2025-09-24 19:54:34Z] Processing report: Endpoint List - 1.3....  :: INFORMATION [2025-09-24 19:54:34Z] Generating reports for the interval 2025-08-01T04:00:00.0000000Z - 2025-08-31T03:59:59.9990000Z.  :: INFORMATION [2025-09-24 19:54:34Z]     Creating enhanced endpoint specific Excel file ...  :: INFORMATION [2025-09-24 19:54:34Z]     Adding Unity data to sheets ...  :: INFORMATION [

In the Management Console, the user can list out all the entities that needs attention by using the filters. I would also like to get all of those entities via the API. I have found this endpoint:/service/api/status/gsm/{keyCode}With the field BasicInfo having the subfield of AttentionRequired: bool This is great, but somehow the data from the API does not match the entities in the web console (Some missing, there’s some entities from the API not present in the web console, etc.) Also I can’t get the entityId, and the marname, these fields are from when I inspected the network request from the web console, the data is in JSON form and it seems to be perfect for what we need.

Good day,I am working on enabling DNS Protection and setting some of its options using Unity API. I can successfully enable and disable the module using Unity API and I can set the site policy to one that includes DNS Protection on our endpoints, and the network wide DNS Protection Policy for a Static IP. However, I cannot see a way to set the Agent/Endpoint DNS Protection Policy. It does not even seem this is possible with the current set of commands.Am I missing something? Or is this not possible? Might it be an option that will be enabled in the future?Thanks,Chris

Can’t create fully extended data reports. Error every time.

Hi - the most recent conversation re your UCS was 10 months ago, where it was called out that it doesn’t run as a service.Has this been resolved yet?  The install docs don’t reference anything about services.Thanks,Andy 

I have not tried the Universal Reporter yet and I am wondering if there is a way to avoidhaving to bother with MSO/Excel. Can the data pulled via PowerShell direclty so I can parse it with something else? Thanks For Your Help

Starting on October 12th we noticed a rise in API call failures specific to the https://unityapi.webrootcloudav.com/service/api/status/site/{GSMKey} endpoint. The receive the following response: "statusCode: 500,""requestId: '',"error: null,""error_description: ""SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)","AdditionalInformation: {}   

Had been running this report (Endpoint:List) with no problems.I added a couple of new sites.Universal Reporter is log indicates it is successful on the first site, and I get output for it.It fails on the second site (the first NEW site), with the error: :: ERROR [2023-10-12 15:54:16Z] Exception occurred. Exiting processing....   {"statusCode":500,"requestId":"31205b99-c3da-4e7b-8618-cd183536f303","error":null,"error_description":"SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)","AdditionalInformation":{}}  At C:\Users\Me\OneDrive - MyCompany\Documents\Webroot Reporting\Runs\20231012T2153265213848Z\Templates\Endpoint List - 1.3\Scripts\template.psm1:275 char:5+     Get-UnityAPISkyStatusSiteEndpointStatusSite -UnityAPIClient $Scri ...The output for the failed site appears to have legitimate Parameters, Site, and ConsoleEndpoints sheets, but the other sheets all have headers but no endpoints.

We have been using the API https://unityapi.webrootcloudav.com/service/api/status/site/{GSMKey} for many months now and it has been working fine until this morning.I have started receiving the following response and was wondering why this woudl suddenly be the case. I am getting the same result from other API calls for the endpoint status. {    "statusCode": 500,    "requestId": ",    "error": null,    "error_description": "SkyStatus request failed (No parameterless constructor defined for type of 'System.String'.)",    "AdditionalInformation": {}} 

I was really excited to see this Application, we use Rapid7 and there was no good way to get this data into IDR. My excitement was quickly diminished immediately after I installed this software. Why create a software that is to redirect logs, and in this case to a SIEM and not make it run as a service? I tested it, right after I set it up, I monitored the service running and as soon as I logged off my admin account the service stopped and I can only assume the logging stopped as well. Is there anyway to run this as a service? I really don’t need to see the Scrolling CLI,  that feature is pretty much pointless. 

Hello,I would like to have assistance regarding the webroot Universal Reporter tool.My focus is to automate webroot emails with all the information automated but with my design. At the moment, I am in a testing phase where the email is configured, but it doesn't send anything automatically. When I click on "run reporting" in the "Run Reports" tab, it only gives me the PDF file and not via email.Could someone help me configure the automation of email sending?Best regards,António Correia   

Hello, I need to get my client’s Agentstatus data but the queryresults aren't giving me any results when trying to query it. Am I doing something wrong? Thank you! 

Hi, I get one report for 682 devices.  How do I run a report for the individual customers (entities) ?Do I need to configure them as individual sites, each with a different parent / install keycode?

Running the “DNS Allowed DU Streaming Median and Social Networking” script, I continually get an error with v1.3 that I did not get with v1.2. The error is “Exception during Template processing:  Unable to deserialize error response (Invalid character '<' in input string).  At C:\Users\*****\Documents\Webroot Reporting\Runs\20230517T2005153219444Z\Templates\DNS Allowed DU Streaming Media and Social Networking\Scripts\template.psm1:364 char:5+     Get-UnityAPIConsoleGSMDNSPTrafficByCategorySite -UnityAPIClient $ ...

Hi All, I am calling the reports end point and it’s return only 6 endpoints, I have checked I have 7 active endpoints. or is there any way I can call the inactive endpoints using the API.If anybody can help?Thanks,  

Is there a way to automatically send reports on a weekly interval(7 days). Our client wants to get a report weekly to see who’s already finished and not with the training.

When creating a Carbonite replication job, you have to make some decisions on the Job Options.  Some of these options straight forward decisions, do you want encryption, True or False, others may have to build more logic in the decision.  The next set of examples include how to address some of these in-depth decisions.Mirror Start OptionsThe Mirror Start Options has several different choices when viewed in the console.Mirror Start OptionsHowever, when processing the PowerSh

If you write PowerShell scripts for testing and want to provide them to clients, but any credentials need to be scrubbed prior to sending them, you can try using an XML Secured Object instead.  The basic concept is to create a script that receives the username and password through the secured prompt in PowerShell and outputs an XML file with the information encrypted.To note this is not a highly secured option and should not be used in any production environment.  This is an example of hiding your password while testing and demoing.Use the Read-Host -AsSecuredString to keep the password hiddencreate a new object using the System.Management.Automation.PSCredential class then use Export-clixml to output it into a Secured XML.  The xml output results in

The following guide is also included as a readme file in the download package for the OpenText Universal Syslog Connector

Tell us how you are using the new Unity API event notification service.  And what are some of the new events that you like us to publish through this API endpoint? 

please share your thoughts

I have been using ADF to query the endpoint threat history API.https://unityapi.webrootcloudav.com//service/api/console/gsm/xxxxxx/sites/xxxxxxx/threathistoryThis has been working successfully for many weeks. we have been nearing the end of our subscription period and have been granted an extension of 30 days for our license, but now when I query this API I get the following error.Error(BLOCKEDPROGRAMS0021): Users endpoint protection access has expired"I can still get results back from other API’s I call using the same credentials so it seems isolated to the endpoint threat protection historyIs this something to do with this being a temporary license?How can I go about resolving? Many thanks Matt Lang

Is it possible to create an API key that has only access to a single site?

Hi, I need to be able to use the notifications endpoints for the Unity API, but I am not sure where to go to add the correct scope for my testing access token. Can anyone direct me? The token already has access to the following scopes: scope": "[\"SkyStatus.Site\",\"SkyStatus.GSM\",\"SkyStatus.Usage\",\"SkyStatus.Reporting\",\"Console.GSM\"]"Thanks

I am calling the Endpoint Status GSM API using postman and providing a date and time for the modifiedSince parameter. REST API Call belowGET /service/api/status/gsm/{keyCode}?batchSize=1000 &modifiedSince={modifiedSince}I would expect to see the count of records being returned to steadily increment each time I execute this request, since new records or updated records get returned,  but what I am seeing is confusing and I was hoping someone could help clarify.lets say on my first call I want to see all records that were modified since 11am today. I should see (let’s say in this use case) 100 records returned with no continuation token or URI since my batch size is set to max (1000).If I run the exact same query again a few seconds later I should see the same data or maybew 1 or 2 extra records depending on how busy my system is.What I am seeing instead is less records being returned, often along with a continuation token.