IdsEventsHistoryListResult

IdsEventsHistoryListResult
IDS Events History List Result

Response containing the chronological event history for a specific IDS signature along with the signature's metadata.

Notes:

  • signature_info contains the metadata (name, severity, category) of the queried signature.
  • event_history_list contains up to 5000 chronological IdsEventHistoryEntry objects, each including timestamp and affected compute information.
  • time_interval reflects the resolved query window.
AllOf
JSON Example 
{
    "offset": 0,
    "number_of_results": 0,
    "total_result_count": 0,
    "total_pages": 0,
    "sort_ascending": false,
    "sort_by": "string",
    "time_interval": {
        "start_time": 0,
        "end_time": 0
    },
    "signature_info": {
        "is_active": false,
        "severity": "string",
        "details": "string",
        "signature_id": "string",
        "original_signature_id": "string",
        "total_detected": 0,
        "total_prevented": 0,
        "impact_score": 0,
        "risk_score": 0,
        "confidence_score": 0,
        "time": 0
    },
    "event_history_list": [
        {
            "timestamp": 0,
            "where_detected": "string",
            "src_ip": "string",
            "dest_ip": "string",
            "src_port": 0,
            "dest_port": 0,
            "protocol": "string",
            "rule_name": "string",
            "profile_name": "string",
            "action": "string",
            "attempts": 0,
            "pcap_uuid": "string",
            "pcap_exist": false
        }
    ]
}
Returned By