---
title: "Get a list of threats"
method: GET
path: "/log/threat"
tags: ["Log"]
---

# Get a list of threats

`GET /log/threat`

## Request

- Base URL: `/v1` (relative, and the document was published on a file host, not at the API’s origin)
- URL: `/v1/log/threat`
- Auth: none declared. Required headers: `X-Auth-Token`
- TypeScript: <https://skmtc.dev/neuvector/apis/neuvector-api/docs/log/threat/get.ts> (a function with typed inputs; its response is checked against the schema)

## Headers

- `X-Auth-Token` string, required

## Response `200`

Success

- RESTThreatsData
  - `threats` Threat[], required
    - `name` string
    - `level` string, required
    - `reported_timestamp` integer, required
    - `reported_at` string, required
    - `cluster_name` string, required
    - `response_rule_id` integer
    - `host_id` string, required
    - `host_name` string, required
    - `enforcer_id` string, required
    - `enforcer_name` string, required
    - `id` string, required
    - `threat_id` integer, required
    - `client_workload_id` string, required
    - `client_workload_name` string, required
    - `client_workload_domain` string
    - `client_workload_image` string
    - `client_workload_service` string
    - `server_workload_id` string, required
    - `server_workload_name` string, required
    - `server_workload_domain` string
    - `server_workload_image` string
    - `server_workload_service` string
    - `severity` string, required
    - `action` string, required
    - `count` integer, required
    - `ether_type` integer, required
    - `client_port` integer, required
    - `server_port` integer, required
    - `server_conn_port` integer, required
    - `icmp_code` integer, required
    - `icmp_type` integer, required
    - `ip_proto` integer, required
    - `client_ip` string, required
    - `server_ip` string, required
    - `application` string, required
    - `sensor` string, required
    - `group` string, required
    - `target` string, required
    - `monitor` boolean, required
    - `cap_len` integer
    - `packet` string
    - `message` string, required

---

[API](https://skmtc.dev/neuvector/apis/neuvector-api.md) - [All operations](https://skmtc.dev/neuvector/apis/neuvector-api/llms.txt) - [OpenAPI document](https://skmtc.dev/neuvector/apis/neuvector-api/revisions/b8d8d28840b3?raw)
