List Application Monitoring Results
Retrieve monitoring results per application over a specified time interval, with pagination and filtering.
Each result contains flow metrics (unique flow count, unprotected flows, additional rule hits, east-west flows, external flows), the application's metadata, and the status of its most recent publish job. Use this endpoint to populate the Application Monitoring table view.
Key filters:
has_unprotected_flows: true- surface applications with security exposure (flows not covered by any specific allow rule)application_connectivity_strategies- filter by the connectivity strategy set on the application's security policyconnectivity_preferences- filter by the policy's default connectivity preference (ALLOWLIST/DENYLIST)display_name- substring match on application name
Use the id field in each result as the {application-id} path parameter for
GET /monitoring/applications/{application-id}/monitoring-config,
POST /monitoring/applications/{application-id}/flow-counts, and
POST /monitoring/applications/{application-id}/publish-config.
Pagination, sort, time range, and optional filters
{
"page_size": 50,
"sort_ascending": true,
"offset": 0,
"time_selection": {
"start_time": 1781806091643
},
"sort_by": "display_name"
}
OK. Successfully retrieved per-application monitoring results.
{
"offset": 0,
"result_count": 2,
"number_of_results": 2,
"total_result_count": 2,
"total_pages": 1,
"results": [
{
"id": "398d1f18-cbdf-4960-b881-bb4e160952a8",
"display_name": "LTN_West_debug_PowerBI",
"application_type": "REGULAR",
"application_workload_type": "REGULAR",
"additional_rule_hit_count": 0,
"unprotected_count": 0,
"east_west_flow_unique_count": 0,
"north_south_flow_unique_count": 0,
"unique_flow_count": 0,
"policy_infos": [],
"alerts": [
"APPLICATION_ONLY_CONTAINS_IP",
"APPLICATION_NO_APP_CATEGORY_SECTION"
]
}
],
"alerts": []
}
Bad Request
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Unauthorized
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Forbidden
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Precondition Failed
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Precondition Required
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Too Many Requests
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Error
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
curl -X POST -H 'Authorization: <value>' -H 'Content-Type: application/json' -d '{}' https://{api_host}/intelligence/monitoring/applications/results-by-app