Log

Get a list of threats

get/log/threat

Request

Headers

X-Auth-Tokenstring required

Response

Success

Example response

{
  "threats": [
    {
      "name": "HTTP.Request.Slowloris",
      "level": "CRIT",
      "reported_timestamp": 1505755712,
      "reported_at": "2017-09-18T17:28:32Z",
      "cluster_name": "cluster1",
      "response_rule_id": 10005,
      "host_id": "ubuntu64:ZYA3:NPGZ:IU64:XJ3P:SUU3:QYEF:SLVT",
      "host_name": "ubuntu64",
      "enforcer_id": "2fdc03e027d6483633376609",
      "enforcer_name": "allinone",
      "id": "999-9c96-11e7-83c1-17580b",
      "threat_id": 2017,
      "client_workload_id": "7e31a2a4d4074ba459f8c22ee90",
      "client_workload_name": "iperfclient",
      "server_workload_id": "2cbab37b43efe049e583924a73a764b096ce8f15ea",
      "server_workload_name": "iperfserver",
      "severity": "critical",
      "action": "monitor",
      "count": 1,
      "ether_type": 2048,
      "client_port": 53825,
      "server_port": 5000,
      "server_conn_port": 5000,
      "ip_proto": 6,
      "client_ip": "172.17.0.4",
      "server_ip": "172.17.0.3",
      "application": "HTTP",
      "target": "true",
      "monitor": true,
      "cap_len": 32043,
      "packet": "base64string",
      "message": "Header duration=3s, threshold=3s"
    }
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.