Fetch Application Monitoring Summary
Retrieve a summary count of applications grouped by monitoring status for a specified time interval.
Returns three counters:
apps_with_unprotected_flows- applications with flows that bypassed all specific DFW allow rulesapps_with_custom_rule_hits- applications where user-configured additional monitoring rules were hitapps_with_no_hits- applications with no flows hitting the default any-any rule and no flows hitting additional monitoring rules
Use this endpoint to populate the summary cards at the top of the Application Monitoring dashboard. To drill into specific applications, follow up with POST /monitoring/applications/results-by-app.
Time range and optional filters
{
"time_selection": {
"start_time": 1781806091654
}
}
Time parameters for querying monitoring data. Specifies the start time for the query window, with the end time implicitly set to the current time. The system will examine monitoring metrics from the specified start_time to now.
Specifies the priority level of the application.
Identifier (uuid) for an application to include in monitoring results.
OK. Successfully retrieved application monitoring summary.
{
"apps_with_unprotected_flows": 0,
"apps_with_custom_rule_hits": 0,
"apps_with_no_hits": 2
}
Number of applications where at least one flow hit the default any-any rule (src=ANY, dst=ANY, service=ANY), indicating traffic that is not covered by any specific DFW allow rule.
Notes:
- Applications with unprotected flows represent potential security exposure and should be reviewed.
Number of applications where user-configured additional monitoring rules were matched during the interval.
Number of applications with no monitoring activity in the interval.
Notes:
- This can occur when there are no flows hitting the default any-any rule and no flows hitting user configured additional monitoring rules.
Bad Request
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Unauthorized
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Forbidden
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Precondition Failed
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Precondition Required
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Too Many Requests
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Error
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
curl -X POST -H 'Authorization: <value>' -H 'Content-Type: application/json' -d '{}' https://{api_host}/intelligence/monitoring/applications/summary