Query Compute Flow Details
Returns a paginated list of unique (deduplicated) compute-level flow records matching the supplied filters. Flows are deduplicated by the 4-tuple of source VM, destination VM, destination port, and protocol -- multiple occurrences within the time window collapse into a single row reflecting the most recently observed state.
Notes:
start_timeis required. Eithersite_idorsite_idsmust also be provided.filtersaccepts up to 300 filter entries.- This endpoint queries across all computes. To retrieve flows for a specific VM, use
POST /visualization/flow-analysis/computes/{compute-id}/flow-details.
Wrapper request for ComputeFlowDetails with restricted filter keys
{
"start_time": 0,
"site_id": "d24d934d-dd3c-492f-babc-11a125a1d5d7",
"page_size": 50,
"offset": 0,
"filters": []
}
success
{
"offset": 0,
"number_of_results": 50,
"total_result_count": 54,
"total_pages": 2,
"time_interval": {
"start_time": 0,
"end_time": 1782916987529
},
"results": [
{
"source": {
"groups": [],
"compute": {
"entity_type": "COMPUTE",
"compute_type": "IP",
"id": "IP-172.16.15.1",
"reference_id": "IP-172.16.15.1",
"name": "172.16.15.1",
"config_events": [],
"highlight": false
},
"apps": [],
"flow_type": "UNKNOWN",
"rules": [
{
"id": "UNKNOWN"
}
],
"jump_to_rules": [
{
"id": "UNKNOWN"
}
]
},
"destination": {
"groups": [],
"compute": {
"entity_type": "COMPUTE",
"compute_type": "VM",
"id": "8a1df84e-dcc6-4835-b7a6-b092192ac4a6",
"reference_id": "8a1df84e-dcc6-4835-b7a6-b092192ac4a6",
"name": "DB-VM-2",
"config_events": [],
"highlight": false
},
"apps": [],
"configured_services": [
"DHCP-Client"
],
"protocol": "UDP",
"port": 68,
"flow_type": "BLOCKED",
"rules": [
{
"id": "1033"
}
],
"jump_to_rules": []
},
"flow_info": {
"last_session_start_time": 1782916190,
"last_session_end_time": 1782916449,
"flow_type": "BLOCKED",
"is_active": false
}
},
{
"source": {
"groups": [],
"compute": {
"entity_type": "COMPUTE",
"compute_type": "IP",
"id": "IP-172.16.14.1",
"reference_id": "IP-172.16.14.1",
"name": "172.16.14.1",
"config_events": [],
"highlight": false
},
"apps": [],
"flow_type": "UNKNOWN",
"rules": [
{
"id": "UNKNOWN"
}
],
"jump_to_rules": [
{
"id": "UNKNOWN"
}
]
},
"destination": {
"groups": [],
"compute": {
"entity_type": "COMPUTE",
"compute_type": "VM",
"id": "bc94f1f5-bb9e-4fc9-a832-2454a8a06c13",
"reference_id": "bc94f1f5-bb9e-4fc9-a832-2454a8a06c13",
"name": "DB-VM-1",
"config_events": [],
"highlight": false
},
"apps": [],
"configured_services": [
"DHCP-Client"
],
"protocol": "UDP",
"port": 68,
"flow_type": "BLOCKED",
"rules": [
{
"id": "1033"
}
],
"jump_to_rules": []
},
"flow_info": {
"last_session_start_time": 1782916222,
"last_session_end_time": 1782916437,
"flow_type": "BLOCKED",
"is_active": false
}
}
]
}
Bad Request
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Unauthorized
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Forbidden
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Precondition Failed
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Precondition Required
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Too Many Requests
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Error
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
curl -X POST -H 'Authorization: <value>' -H 'Content-Type: application/json' -d '{}' https://{api_host}/intelligence/visualization/flow-analysis/compute/flow-details