---
title: "Get security event list"
method: GET
path: "/log/security"
tags: ["Log"]
---

# Get security event list

`GET /log/security`

## Request

- Base URL: `/v1` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/v1/log/security`
- Auth: none declared. Required headers: `X-Auth-Token`
- TypeScript: <https://skmtc.dev/neuvector/apis/neuvector-api/docs/log/security/get.ts> (a function with typed inputs; its response is checked against the schema)

## Headers

- `X-Auth-Token` string, required

## Response `200`

Success

- RESTSecurityData
  - `threats` Threat[], required
    - `name` string
    - `level` string, required
    - `reported_timestamp` integer, required
    - `reported_at` string, required
    - `cluster_name` string, required
    - `response_rule_id` integer
    - `host_id` string, required
    - `host_name` string, required
    - `enforcer_id` string, required
    - `enforcer_name` string, required
    - `id` string, required
    - `threat_id` integer, required
    - `client_workload_id` string, required
    - `client_workload_name` string, required
    - `client_workload_domain` string
    - `client_workload_image` string
    - `client_workload_service` string
    - `server_workload_id` string, required
    - `server_workload_name` string, required
    - `server_workload_domain` string
    - `server_workload_image` string
    - `server_workload_service` string
    - `severity` string, required
    - `action` string, required
    - `count` integer, required
    - `ether_type` integer, required
    - `client_port` integer, required
    - `server_port` integer, required
    - `server_conn_port` integer, required
    - `icmp_code` integer, required
    - `icmp_type` integer, required
    - `ip_proto` integer, required
    - `client_ip` string, required
    - `server_ip` string, required
    - `application` string, required
    - `sensor` string, required
    - `group` string, required
    - `target` string, required
    - `monitor` boolean, required
    - `cap_len` integer
    - `packet` string
    - `message` string, required
  - `incidents` Incident[], required
    - `name` string
    - `level` string, required
    - `reported_timestamp` integer, required
    - `reported_at` string, required
    - `cluster_name` string, required
    - `response_rule_id` integer
    - `host_id` string, required
    - `host_name` string, required
    - `enforcer_id` string, required
    - `enforcer_name` string, required
    - `id` string, required
    - `workload_id` string
    - `workload_name` string
    - `workload_domain` string
    - `workload_image` string
    - `workload_service` string
    - `remote_workload_id` string
    - `remote_workload_name` string
    - `remote_workload_domain` string
    - `remote_workload_image` string
    - `remote_workload_service` string
    - `proc_name` string
    - `proc_path` string
    - `proc_cmd` string
    - `proc_real_uid` integer
    - `proc_effective_uid` integer
    - `proc_real_user` string
    - `proc_effective_user` string
    - `file_path` string
    - `file_name` string[]
    - `client_ip` string, required
    - `server_ip` string, required
    - `client_port` integer, required
    - `server_port` integer, required
    - `server_conn_port` integer, required
    - `ether_type` integer, required
    - `ip_proto` integer, required
    - `conn_ingress` boolean, required
    - `proc_parent_name` string
    - `proc_parent_path` string
    - `action` string, required
    - `group` string, required
    - `rule_id` string, required
    - `aggregation_from` integer, required
    - `count` integer
    - `message` string, required
  - `violations` Violation[], required
    - `name` string
    - `level` string, required
    - `reported_timestamp` integer, required
    - `reported_at` string, required
    - `cluster_name` string, required
    - `response_rule_id` integer
    - `host_id` string, required
    - `host_name` string, required
    - `enforcer_id` string, required
    - `enforcer_name` string, required
    - `id` string, required
    - `client_id` string, required
    - `client_name` string, required
    - `client_domain` string
    - `client_image` string
    - `client_service` string
    - `server_id` string, required
    - `server_name` string, required
    - `server_domain` string
    - `server_image` string
    - `server_service` string
    - `server_port` integer, required
    - `ip_proto` integer, required
    - `applications` string[], required
    - `servers` string[], required
    - `sessions` integer, required
    - `policy_action` string, required
    - `policy_id` integer, required
    - `client_ip` string, required
    - `server_ip` string, required

---

[API](https://skmtc.dev/neuvector/apis/neuvector-api.md) - [All operations](https://skmtc.dev/neuvector/apis/neuvector-api/llms.txt) - [OpenAPI document](https://skmtc.dev/neuvector/apis/neuvector-api/revisions/b8d8d28840b3?raw)