Query Compute Flow Details

Query Compute Flow Details
Query unique (deduplicated) flow records across computes by filter

Returns a paginated list of unique (deduplicated) compute-level flow records matching the supplied filters. Flows are deduplicated by the 4-tuple of source VM, destination VM, destination port, and protocol -- multiple occurrences within the time window collapse into a single row reflecting the most recently observed state.

Notes:

  • start_time is required. Either site_id or site_ids must also be provided.
  • filters accepts up to 300 filter entries.
  • This endpoint queries across all computes. To retrieve flows for a specific VM, use POST /visualization/flow-analysis/computes/{compute-id}/flow-details.
Request
URI
POST
https://{api_host}/intelligence/visualization/flow-analysis/compute/flow-details
COPY
Request Body

Wrapper request for ComputeFlowDetails with restricted filter keys

VizComputeFlowDetailsRequest of type(s) application/json
Required  
This request body class requires all of the following: VizTimeIntervalListSiteRequest , InlineVizComputeFlowDetailsRequest1
{
    "start_time": 0,
    "site_id": "d24d934d-dd3c-492f-babc-11a125a1d5d7",
    "page_size": 50,
    "offset": 0,
    "filters": []
}
Authentication
This operation uses the following authentication methods.
Responses
200

success

Returns FlowDetailListResult of type(s) application/json
This response body class contains all of the following: VizTimeIntervalListResult , InlineFlowDetailListResult1
{
    "offset": 0,
    "number_of_results": 50,
    "total_result_count": 54,
    "total_pages": 2,
    "time_interval": {
        "start_time": 0,
        "end_time": 1782916987529
    },
    "results": [
        {
            "source": {
                "groups": [],
                "compute": {
                    "entity_type": "COMPUTE",
                    "compute_type": "IP",
                    "id": "IP-172.16.15.1",
                    "reference_id": "IP-172.16.15.1",
                    "name": "172.16.15.1",
                    "config_events": [],
                    "highlight": false
                },
                "apps": [],
                "flow_type": "UNKNOWN",
                "rules": [
                    {
                        "id": "UNKNOWN"
                    }
                ],
                "jump_to_rules": [
                    {
                        "id": "UNKNOWN"
                    }
                ]
            },
            "destination": {
                "groups": [],
                "compute": {
                    "entity_type": "COMPUTE",
                    "compute_type": "VM",
                    "id": "8a1df84e-dcc6-4835-b7a6-b092192ac4a6",
                    "reference_id": "8a1df84e-dcc6-4835-b7a6-b092192ac4a6",
                    "name": "DB-VM-2",
                    "config_events": [],
                    "highlight": false
                },
                "apps": [],
                "configured_services": [
                    "DHCP-Client"
                ],
                "protocol": "UDP",
                "port": 68,
                "flow_type": "BLOCKED",
                "rules": [
                    {
                        "id": "1033"
                    }
                ],
                "jump_to_rules": []
            },
            "flow_info": {
                "last_session_start_time": 1782916190,
                "last_session_end_time": 1782916449,
                "flow_type": "BLOCKED",
                "is_active": false
            }
        },
        {
            "source": {
                "groups": [],
                "compute": {
                    "entity_type": "COMPUTE",
                    "compute_type": "IP",
                    "id": "IP-172.16.14.1",
                    "reference_id": "IP-172.16.14.1",
                    "name": "172.16.14.1",
                    "config_events": [],
                    "highlight": false
                },
                "apps": [],
                "flow_type": "UNKNOWN",
                "rules": [
                    {
                        "id": "UNKNOWN"
                    }
                ],
                "jump_to_rules": [
                    {
                        "id": "UNKNOWN"
                    }
                ]
            },
            "destination": {
                "groups": [],
                "compute": {
                    "entity_type": "COMPUTE",
                    "compute_type": "VM",
                    "id": "bc94f1f5-bb9e-4fc9-a832-2454a8a06c13",
                    "reference_id": "bc94f1f5-bb9e-4fc9-a832-2454a8a06c13",
                    "name": "DB-VM-1",
                    "config_events": [],
                    "highlight": false
                },
                "apps": [],
                "configured_services": [
                    "DHCP-Client"
                ],
                "protocol": "UDP",
                "port": 68,
                "flow_type": "BLOCKED",
                "rules": [
                    {
                        "id": "1033"
                    }
                ],
                "jump_to_rules": []
            },
            "flow_info": {
                "last_session_start_time": 1782916222,
                "last_session_end_time": 1782916437,
                "flow_type": "BLOCKED",
                "is_active": false
            }
        }
    ]
}

400

Bad Request

Returns BadRequest of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


401

Unauthorized

Returns Unauthorized of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


403

Forbidden

Returns Forbidden of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


412

Precondition Failed

Returns PreconditionFailed of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


428

Precondition Required

Returns PreconditionRequired of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


429

Too Many Requests

Returns TooManyRequests of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


default

Error

Returns Error of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


Code Samples
COPY
                    curl -X POST -H 'Authorization: <value>' -H 'Content-Type: application/json' -d '{}' https://{api_host}/intelligence/visualization/flow-analysis/compute/flow-details