--- updatedAt: 2026-08-25T12:05:54.000Z agentTools: siteIndex: https://techdocs.akamai.com/llms.txt projectIndex: https://techdocs.akamai.com/etp-reporting/llms.txt --- # Get IOC time series report Lists the DNS activities of a configuration for a given domain or IP, aggregated by day. Omit `startTimeSec` and `endTimeSec` from the request URL to return all available historical information. # OpenAPI definition ```json { "externalDocs": { "description": "See documentation for Akamai's Secure Internet Access Enterprise Reporting API", "url": "https://techdocs.akamai.com/etp-reporting/reference" }, "info": { "license": { "name": "Apache 2.0", "url": "https://www.apache.org/licenses/LICENSE-2.0.html" }, "title": "Indicators of Compromise (IOC) reports", "version": "v3" }, "openapi": "3.0.0", "paths": { "/configs/{configId}/ioc/time-series": { "get": { "description": "Lists the DNS activities of a configuration for a given domain or IP, aggregated by day. Omit `startTimeSec` and `endTimeSec` from the request URL to return all available historical information.", "externalDocs": { "description": "See documentation for this operation in Akamai's Secure Internet Access Enterprise Reporting API", "url": "https://techdocs.akamai.com/etp-reporting/reference/get-time-series" }, "operationId": "get-time-series", "parameters": [ { "description": "The start time for report data, in epoch seconds.", "in": "query", "name": "startTimeSec", "required": true, "schema": { "example": 1333631700, "type": "integer" }, "x-akamai": { "file-path": "parameters/start-time-sec-query.yaml" } }, { "description": "The end time for report data, in epoch seconds.", "in": "query", "name": "endTimeSec", "required": true, "schema": { "example": 1333631700, "type": "integer" }, "x-akamai": { "file-path": "parameters/end-time-sec-query.yaml" } }, { "description": "The target record from which to get blocklisted domains.", "in": "query", "name": "record", "required": true, "schema": { "example": "facebook.com", "type": "string" }, "x-akamai": { "file-path": "parameters/record-query.yaml" } }, { "description": "__Enum__ Specifies the record type, either `DOMAIN` or `IP`.", "in": "query", "name": "recordType", "required": true, "schema": { "enum": [ "DOMAIN", "IP" ], "example": "DOMAIN", "type": "string" }, "x-akamai": { "file-path": "parameters/record-type-query.yaml" } }, { "description": "For customers who manage more than one account, this [runs the operation from another account](https://techdocs.akamai.com/developer/docs/manage-many-accounts-with-one-api-client). The Identity and Access Management API provides a [list of available account switch keys](https://techdocs.akamai.com/iam-api/reference/get-client-account-switch-keys).", "in": "query", "name": "accountSwitchKey", "required": false, "schema": { "example": "1-5C0YLB:1-8BYUX", "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "example": { "columns": [ { "id": "TIMESTAMP", "name": "TIMESTAMP" }, { "id": "TOTAL", "name": "TOTAL" } ], "rows": [ [ "2017-02-23T00:00:00Z", 0 ], [ "2017-02-24T00:00:00Z", 0 ], [ "2017-02-25T00:00:00Z", 0 ], [ "2017-02-26T00:00:00Z", 0 ], [ "2017-02-27T00:00:00Z", 0 ], [ "2017-02-28T00:00:00Z", 0 ], [ "2017-03-01T00:00:00Z", 0 ], [ "2017-03-02T00:00:00Z", 0 ], [ "2017-03-03T00:00:00Z", 0 ], [ "2017-03-04T00:00:00Z", 0 ], [ "2017-03-05T00:00:00Z", 0 ], [ "2017-03-06T00:00:00Z", 0 ], [ "2017-03-07T00:00:00Z", 0 ], [ "2017-03-08T00:00:00Z", 0 ], [ "2017-03-09T00:00:00Z", 0 ], [ "2017-03-10T00:00:00Z", 0 ], [ "2017-03-11T00:00:00Z", 0 ], [ "2017-03-12T00:00:00Z", 0 ], [ "2017-03-13T00:00:00Z", 0 ], [ "2017-03-14T00:00:00Z", 0 ], [ "2017-03-15T00:00:00Z", 0 ], [ "2017-03-16T00:00:00Z", 2 ], [ "2017-03-17T00:00:00Z", 0 ], [ "2017-03-18T00:00:00Z", 0 ], [ "2017-03-19T00:00:00Z", 0 ], [ "2017-03-20T00:00:00Z", 0 ], [ "2017-03-21T00:00:00Z", 0 ], [ "2017-03-22T00:00:00Z", 0 ], [ "2017-03-23T00:00:00Z", 0 ] ] }, "schema": { "additionalProperties": false, "description": "High-level event details including timestamped records with associated event metrics.", "properties": { "columns": { "description": "Configures the time series data columns.", "items": { "additionalProperties": false, "properties": { "id": { "description": "Identifier of column data.", "minLength": 1, "type": "string" }, "name": { "description": "Name of column data.", "minLength": 1, "type": "string" } }, "required": [ "name", "id" ], "type": "object" }, "minItems": 1, "type": "array" }, "rows": { "description": "An array of arrays containing a timestamp followed by event counts.", "items": { "items": { "oneOf": [ { "description": "ISO 8601 timestamp within the requested time frame.", "format": "date-time", "title": "timestamp string", "type": "string" }, { "description": "A count of events matching the timestamp.", "title": "event count", "type": "integer" } ] }, "type": "array" }, "type": "array" } }, "type": "object", "x-akamai": { "file-path": "schemas/common-time-series-response.yaml" } } } }, "description": "Successful response." }, "400": { "content": { "application/problem+json": { "examples": { "invalid-format": { "summary": "Invalid request format", "value": { "detail": "The system cannot understand your request. Please check the syntax and correct any problems.", "instance": "1e4c346b-3a36-4527-9c37-86ae748b87c5", "status": 400, "title": "Bad Request", "type": "https://problems.omni.akamaiapis.net/http/bad-request" } }, "invalid-start-time": { "summary": "Invalid startTime", "value": { "detail": "Start time is invalid. Code-000104", "instance": "0415df5e-6e9c-4596-bdd3-9ada53b63599", "status": 400, "title": "Bad Request", "type": "https://problems.omni.akamaiapis.net/http/bad-request" } } }, "schema": { "additionalProperties": true, "description": "A common [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) Problem Response error.", "properties": { "detail": { "description": "A human-readable explanation specific to the problem.", "minLength": 1, "type": "string" }, "errors": { "description": "A list of HTTP problem details. The error response includes this list if there are several problems with a single request, to call out each of them separately.", "items": { "description": "A nested problem response error object.", "type": "object", "x-akamai": { "file-path": "schemas/http-problem-nested.yaml" } }, "minItems": 0, "type": "array" }, "instance": { "description": "The URI for this error occurrence.", "type": "string" }, "status": { "description": "The HTTP status code generated by the origin server.", "minimum": 0, "type": "integer" }, "title": { "description": "A short, human-readable summary of the problem type.", "minLength": 1, "type": "string" }, "type": { "description": "A URI that identifies the problem type.", "minLength": 1, "type": "string" } }, "required": [ "type", "title", "detail", "instance", "status" ], "type": "object", "x-akamai": { "file-path": "schemas/http-problem.yaml" } } } }, "description": "[Bad Request](https://techdocs.akamai.com/etp-reporting/reference/400).", "x-akamai": { "file-path": "errors/400.yaml" } }, "403": { "content": { "application/problem+json": { "example": { "detail": "Insufficient permissions. Code-01", "instance": "3e3f11da-e205-409a-be77-24e459f29fa8", "status": 403, "title": "Forbidden", "type": "https://problems.omni.akamaiapis.net/http/forbidden" }, "schema": { "additionalProperties": true, "description": "A common [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) Problem Response error.", "properties": { "detail": { "description": "A human-readable explanation specific to the problem.", "minLength": 1, "type": "string" }, "errors": { "description": "A list of HTTP problem details. The error response includes this list if there are several problems with a single request, to call out each of them separately.", "items": { "description": "A nested problem response error object.", "type": "object", "x-akamai": { "file-path": "schemas/http-problem-nested.yaml" } }, "minItems": 0, "type": "array" }, "instance": { "description": "The URI for this error occurrence.", "type": "string" }, "status": { "description": "The HTTP status code generated by the origin server.", "minimum": 0, "type": "integer" }, "title": { "description": "A short, human-readable summary of the problem type.", "minLength": 1, "type": "string" }, "type": { "description": "A URI that identifies the problem type.", "minLength": 1, "type": "string" } }, "required": [ "type", "title", "detail", "instance", "status" ], "type": "object", "x-akamai": { "file-path": "schemas/http-problem.yaml" } } } }, "description": "[Access forbidden](https://techdocs.akamai.com/etp-reporting/reference/403).", "x-akamai": { "file-path": "errors/insufficient-permissions-403.yaml" } }, "404": { "content": { "application/problem+json": { "example": { "detail": "Invalid SIA configuration 101. Code-090209", "instance": "aeb030ed-0645-484d-93e2-77e88566312c", "status": 404, "title": "Not Found", "type": "https://problems.omni.akamaiapis.net/http/not-found" }, "schema": { "additionalProperties": true, "description": "A common [RFC 9457](https://www.rfc-editor.org/rfc/rfc9457) Problem Response error.", "properties": { "detail": { "description": "A human-readable explanation specific to the problem.", "minLength": 1, "type": "string" }, "errors": { "description": "A list of HTTP problem details. The error response includes this list if there are several problems with a single request, to call out each of them separately.", "items": { "description": "A nested problem response error object.", "type": "object", "x-akamai": { "file-path": "schemas/http-problem-nested.yaml" } }, "minItems": 0, "type": "array" }, "instance": { "description": "The URI for this error occurrence.", "type": "string" }, "status": { "description": "The HTTP status code generated by the origin server.", "minimum": 0, "type": "integer" }, "title": { "description": "A short, human-readable summary of the problem type.", "minLength": 1, "type": "string" }, "type": { "description": "A URI that identifies the problem type.", "minLength": 1, "type": "string" } }, "required": [ "type", "title", "detail", "instance", "status" ], "type": "object", "x-akamai": { "file-path": "schemas/http-problem.yaml" } } } }, "description": "[Configuration not Found](https://techdocs.akamai.com/etp-reporting/reference/404).", "x-akamai": { "file-path": "errors/not-found-404.yaml" } } }, "summary": "Get IOC time series report", "tags": [ "IOC reports" ] }, "parameters": [ { "description": "A unique identifier for each configuration.", "in": "path", "name": "configId", "required": true, "schema": { "example": 100, "type": "integer" }, "x-akamai": { "file-path": "parameters/config-id-path.yaml" } } ], "x-akamai": { "file-path": "paths/ioc-time-series.yaml", "path-info": "/configs/{configId}/ioc/time-series" } } }, "servers": [ { "url": "https://{hostname}/etp-report/v3" } ], "tags": [ { "description": "Generate reports for Indicators of Compromise (IOC) records. IOCs are artifacts observed on a network or in an operating system that indicate a computer intrusion with high confidence.", "name": "IOC reports" } ], "x-akamai": { "auth-type": "EDGE_GRID", "file-path": "08-ioc.yaml" }, "x-readme": { "explorer-enabled": false, "samples-languages": [ "curl", "python", "node" ] } } ``` # Sibling pages * [Get IOC time series report](https://techdocs.akamai.com/etp-reporting/reference/get-time-series.md) * [Get IOC change report](https://techdocs.akamai.com/etp-reporting/reference/get-ioc-changes.md) * [Get IOC AVC details report](https://techdocs.akamai.com/etp-reporting/reference/get-ioc-details-avc.md) * [Get IOC CIDR details report](https://techdocs.akamai.com/etp-reporting/reference/get-ioc-details-cidr.md) * [Get IOC domain tree report](https://techdocs.akamai.com/etp-reporting/reference/get-ioc-domain-tree.md) * [Get IOC change report](https://techdocs.akamai.com/etp-reporting/reference/get-ioc-changes-1.md) * [Get IOC AVC details report](https://techdocs.akamai.com/etp-reporting/reference/get-ioc-details-avc-1.md) * [Get IOC CIDR details report](https://techdocs.akamai.com/etp-reporting/reference/get-ioc-details-cidr-1.md) * [Get IOC domain tree report](https://techdocs.akamai.com/etp-reporting/reference/get-ioc-domain-tree-1.md)