FlowSource
Flow Source
Source-side metadata for an aggregated flow record.
Notes:
computeis the source VM.groupslists the NSX groups the source compute belongs to within the flow context.appslists the NSX applications the source compute belongs to.flow_typeis the last observed flow type on the source side (e.g.,ALLOWED,BLOCKED).ruleslists the DFW rules matched on the source side;jump_to_ruleslists any jump-to rules.
JSON Example
{
"groups": [
{
"id": "string",
"display_name": "string",
"reference_id": "string"
}
],
"compute": {
"compute_type": "string"
},
"apps": [
{
"association_count": 0,
"id": "string",
"reference_id": "string",
"name": "string",
"last_updated_time": 0,
"entity_type": "string",
"total_incoming_connections": 0,
"total_outgoing_connections": 0,
"config_events": [
{
"event_time": 0
}
],
"fw_properties": {
"ew_allowed": 0,
"ew_blocked": 0,
"ew_unmicrosegmented": 0,
"ew_vds": 0
},
"highlight": false,
"state": "string",
"application_type": "CRITICAL",
"application_workload_type": "string",
"direct_member_count": 0,
"tier_member_count": 0
}
],
"flow_type": "string",
"rules": [
{
"association_count": 0,
"id": "string",
"reference_id": "string",
"name": "string",
"last_updated_time": 0,
"sequence_number": 0
}
],
"jump_to_rules": [
{
"association_count": 0,
"id": "string",
"reference_id": "string",
"name": "string",
"last_updated_time": 0,
"sequence_number": 0
}
]
}
flow_type
Optional
Enum representing the classification of a network flow based on firewall rule action.
Enumeration:
UNKNOWN,
UN_MICROSEGMENTED,
BLOCKED,
ALLOWED,
VDS