Get Groups Related Rule Counts
Returns aggregate DFW and IDS rule counts for each of the specified groups. Each result entry contains the group ID along with its DFW rule count and IDS rule count.
Notes:
start_timeis required. Eithersite_idorsite_idsmust also be provided.- Either
group_idsorgroup_pathsmust be provided, but not both. Each list accepts up to 20 entries. relationship_type: CONTAINS(default) counts rules that directly reference the group in their applied-to, source, or destination scope.relationship_type: EFFECTIVE_MEMBERScounts rules affecting individual VMs within the group rather than the group directly.- To retrieve the full list of DFW rules for a specific group, use
POST /visualization/security-analysis/groups/{group-id}/related-dfw-rules. - To retrieve the full list of IDS rules for a specific group, use
POST /visualization/threat-analysis/groups/{group-id}/related-ids-rules. - To get equivalent rule counts for computes instead of groups, use
POST /visualization/security-analysis/computes/related-rule-counts.
Wrapper request for GroupsRelatedRuleCounts
{
"start_time": 0,
"site_id": "17f7c7e5-7f8c-490a-97e9-b9c9193c45e1",
"group_ids": [
"24725593-6e9b-41b9-9681-e8b3a273849a"
],
"relationship_type": "CONTAINS"
}
success
{
"results": [
{
"entity_id": "24725593-6e9b-41b9-9681-e8b3a273849a",
"dfw_rule_count": 0,
"ids_rule_count": 0
}
]
}
The list of entity rule counts.
Bad Request
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Unauthorized
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Forbidden
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Precondition Failed
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Precondition Required
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Too Many Requests
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Error
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
curl -X POST -H 'Authorization: <value>' -H 'Content-Type: application/json' -d '{}' https://{api_host}/intelligence/visualization/security-analysis/groups/related-rule-counts