Log
Get a list of threats
get/log/threat
Request
- Base URL/v1 (relative, and the document was published on a file host, not at the API’s origin)
- Authnone declared. Required headers: X-Auth-Token
- TypeScriptA function with typed inputs. Its response is checked against the schema.
Headers
X-Auth-Tokenstring required
Response
Success
Example response
{
"threats": [
{
"name": "HTTP.Request.Slowloris",
"level": "CRIT",
"reported_timestamp": 1505755712,
"reported_at": "2017-09-18T17:28:32Z",
"cluster_name": "cluster1",
"response_rule_id": 10005,
"host_id": "ubuntu64:ZYA3:NPGZ:IU64:XJ3P:SUU3:QYEF:SLVT",
"host_name": "ubuntu64",
"enforcer_id": "2fdc03e027d6483633376609",
"enforcer_name": "allinone",
"id": "999-9c96-11e7-83c1-17580b",
"threat_id": 2017,
"client_workload_id": "7e31a2a4d4074ba459f8c22ee90",
"client_workload_name": "iperfclient",
"server_workload_id": "2cbab37b43efe049e583924a73a764b096ce8f15ea",
"server_workload_name": "iperfserver",
"severity": "critical",
"action": "monitor",
"count": 1,
"ether_type": 2048,
"client_port": 53825,
"server_port": 5000,
"server_conn_port": 5000,
"ip_proto": 6,
"client_ip": "172.17.0.4",
"server_ip": "172.17.0.3",
"application": "HTTP",
"target": "true",
"monitor": true,
"cap_len": 32043,
"packet": "base64string",
"message": "Header duration=3s, threshold=3s"
}
]
}Changes
No recorded changes to this operation across all 1 revision of this API.