Report security connector event totals

get https://{hostname}/etp-report/v3/configs/{configId}/sinkhole-events/aggregate

Lists the count of Security Connector events, grouped by the chosen query aggregation.

Path Params

configId

integer

required

A unique identifier for each configuration.

Query Params

dimension

string

required

Enum Optionally filter by a dimension of data. Refer to Filters for a complete list.

cardinality

integer

The number of records to fetch for the aggregation.

startTimeSec

integer

required

The start time for report data, in epoch seconds.

endTimeSec

integer

required

The end time for report data, in epoch seconds.

filters

object

required

Filters report data using the Filters JSON object. You supply this object as the value after you define the filter parameters.

accountSwitchKey

string

For customers who manage more than one account, this runs the operation from another account. The Identity and Access Management API provides a list of available account switch keys.

Responses

Language

Authentication

Remember to add your authentication credentials to run this code.

URL


xxxxxxxxxx
1
curl --request GET \
2
     --url 'https://hostname/etp-report/v3/configs/configId/sinkhole-events/aggregate?dimension=encryptedSourceIp&filters=action=[object Object]&category=[object Object]&confidence=[object Object]&destinationIP=[object Object]&destinationPort=[object Object]&domain=[object Object]&dropFlag=[object Object]&hasCorrelation=[object Object]&hfRedirectType=[object Object]&hostname=[object Object]&isAlert=[object Object]&list=[object Object]&policy=[object Object]&proxyMode=[object Object]&redirectType=[object Object]&requestId=[object Object]&sinkholeId=[object Object]&sinkholeIp=[object Object]&site=[object Object]&sourcePort=[object Object]&status=[object Object]' \
3
     --header 'accept: application/json'


xxxxxxxxxx
14
 
1
{
2
  "aggregations": [
3
    {
4
      "id": "192.0.2.228",
5
      "name": "192.0.2.176",
6
      "total": 14
7
    }
8
  ],
9
  "dimension": {
10
    "id": "sourceIP",
11
    "name": "internalIP",
12
    "total": 1
13
  }
14
}

200Successful response.

400Bad Request.

403Access forbidden.

404Configuration not Found.