VizIdsIdEventsHistoryRequest

VizIdsIdEventsHistoryRequest
Visualization IDS ID Events History Request

Request object for retrieving a chronological timeline of intrusion detection events for a specific IDS signature.

Notes:

  • start_time is required. Either site_id or site_ids must also be provided.
  • filters accepts up to 300 filter entries. Supported filter keys: IDS_EFFECTIVE_ACTION, IDS_SOURCE_IP_ADDRESS, IDS_SOURCE_PORT, IDS_DESTINATION_IP_ADDRESS, IDS_DESTINATION_PORT, IDS_WHERE_DETECTED, IDS_PROFILE_NAME, IDS_RULE_NAME, IDS_PCAP_UUID.
  • A maximum of 5000 events are returned.
AllOf
JSON Example
{
    "start_time": 1779490915251,
    "page_size": 50,
    "offset": 0,
    "site_id": "17f7c7e5-7f8c-490a-97e9-b9c9193c45e1"
}