NEneuvector
Log

Show threat

get/log/threat/{id}

Request

Path parameters

idstring required

Threat ID

Headers

X-Auth-Tokenstring required

Response

Success

Example response

{
  "threat": {
    "name": "HTTP.Request.Slowloris",
    "level": "CRIT",
    "reported_timestamp": 1505755712,
    "reported_at": "2017-09-18T17:28:32Z",
    "cluster_name": "cluster1",
    "response_rule_id": 10005,
    "host_id": "ubuntu64:ZYA3:NPGZ:IU64:XJ3P:SUU3:QYEF:SLVT",
    "host_name": "ubuntu64",
    "enforcer_id": "2fdc03e027d6483633376609",
    "enforcer_name": "allinone",
    "id": "999-9c96-11e7-83c1-17580b",
    "threat_id": 2017,
    "client_workload_id": "7e31a2a4d4074ba459f8c22ee90",
    "client_workload_name": "iperfclient",
    "server_workload_id": "2cbab37b43efe049e583924a73a764b096ce8f15ea",
    "server_workload_name": "iperfserver",
    "severity": "critical",
    "action": "monitor",
    "count": 1,
    "ether_type": 2048,
    "client_port": 53825,
    "server_port": 5000,
    "server_conn_port": 5000,
    "ip_proto": 6,
    "client_ip": "172.17.0.4",
    "server_ip": "172.17.0.3",
    "application": "HTTP",
    "target": "true",
    "monitor": true,
    "cap_len": 32043,
    "packet": "base64string",
    "message": "Header duration=3s, threshold=3s"
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.