BUbunny
Event Logs

Search, filter and group Event Logs for a Shield Zone

Changed on
post/shield/event-logs/{shieldZoneId}/search

Request

Path parameters

shieldZoneIdinteger required

The ID of the Shield Zone.

Request body

frominteger

Window start as Unix time in milliseconds (UTC). Required.

tointeger

Window end as Unix time in milliseconds (UTC). Required; must be after BunnyNet.Shield.Api.Entities.Waf.WafLogging.EventLogsSearchRequest.from and within the last 72 hours.

querystring nullable

Optional free-text search across IP, ruleId, URL, User-Agent and rule name.

groupBystring[] nullable

Optional ordered dimensions to group by, e.g. ["ip","ja4"]. Omit for flat rows. Allowed: feature, ruleId, ip, ja4, ua, url, asn, country, action.

bucketsinteger

When grouping, the number of time buckets for each group's sparkline histogram over the window. 0 (default) omits the sparkline; clamped to 500.

pageinteger

Zero-based page index.

pageSizeinteger

Page size; clamped to 1–500 (defaults to 50 when unset).

Response

OK

totalinteger

Total flat rows, or total distinct groups when grouped.

totalPagesinteger

Total number of pages for the current page size.

pageinteger

Zero-based index of the returned page.

Changes