NSX-T Data Center REST API

Get Geo IP Blocked Events

Get Geo IP Blocked Events. The system will return the latest 25k events stored.
User can use optional request parameters like source_country_code or source_ip_address to filter the response.

Request:

Method:
GET
URI Path(s):
/policy/api/v1/infra/geo-ip/blocked-events
/policy/api/v1/orgs/{org-id}/projects/{project-id}/infra/geo-ip/blocked-events
Request Headers:
n/a
Query Parameters:
GeoIpBlockedEventsFilterParameters+
Request Body:
n/a

Example Request:

GET https://<policy-mgr>/policy/api/v1/infra/geo-ip/blocked-events?source_country_code=US

Successful Response:

Response Code:
200 OK
Response Headers:
Content-type: application/json
Response Body:
GeoIpBlockedEventsList+

Example Response:

{ "geo_ip_blocked_events": [ { "source_ip_address": "40.40.40.10", "destination_ip_address": "40.40.40.11", "rule_id": 2037, "source_country_code": "US", "destination_country_code": "US", "source_country_name": "United States", "destination_country_name": "United States", "count": 1234, "direction": "IN", "start_timestamp": 1704874019, "end_timestamp": 1704885432 }, { "source_ip_address": "40.40.40.12", "destination_ip_address": "40.40.40.13", "rule_id": 2038, "source_country_code": "US", "destination_country_code": "US", "source_country_name": "United States", "destination_country_name": "United States", "count": 2345, "direction": "OUT", "start_timestamp": 1704873519, "end_timestamp": 1704885423 } ], "result_count": 2, "sort_by": "end_timestamp", "sort_ascending": false, "cursor": 2 }

Required Permissions:

read

Feature:

policy_edge_fw

Additional Errors: