Report threat event totalsget https://{hostname}/etp-report/v3/configs/{configId}/threat-events/aggregateLists the count of threat events, grouped by the chosen query aggregation.Path ParamsconfigIdintegerrequiredA unique identifier for each configuration.Query ParamsdimensionstringenumrequiredEnum Optionally filter by a dimension of data. Refer to Filters for a complete list.domaindestinationIPsitelistpolicyactioncategoryconfidenceclientIPtransportTypedohAttributionsublocationIddevicePostureRiskdetectionTypedeviceIdonrampTypeencryptedInternalClientIPencryptedInternalClientNameencryptedUserNamedeviceOwnerIddlpDictionaryIddlpPatternIddlpFileHashfileTypeapplicationIdriskIdoperationIdthreatIdseverityIdhttpRequestMethoduriproxyDestinationPortreasonl7ProtocolblockDescriptionShow 35 enum valuescardinalityintegerThe number of records to fetch for the aggregation.startTimeSecintegerrequiredThe start time for report data, in epoch seconds.endTimeSecintegerrequiredThe end time for report data, in epoch seconds.filtersobjectrequiredFilters report data using the Filters JSON object. You supply this object as the value after you define the filter parameters.filters objectaccountSwitchKeystringFor customers who manage more than one account, this runs the operation from another account. The Identity and Access Management API provides a list of available account switch keys.HeadersacceptstringenumDefaults to application/jsonGenerated from available response content typesapplication/jsonapplication/problem+jsonAllowed:application/jsonapplication/problem+jsonResponses 200Successful response. 400Bad Request. 403Access forbidden. 404Configuration not Found.Updated about 1 month ago