Get Computes Related Rule Counts

Get Computes Related Rule Counts
Get aggregate related rule counts for computes

Returns aggregate DFW and IDS rule counts for each of the specified computes. Each result entry contains the compute ID along with its DFW rule count and IDS rule count.

Notes:

  • start_time is required. Either site_id or site_ids must also be provided.
  • compute_ids accepts up to 20 compute IDs per request.
  • To retrieve the full list of DFW rules for a specific compute, use POST /visualization/security-analysis/computes/{compute-id}/related-dfw-rules.
  • To retrieve the full list of IDS rules for a specific compute, use POST /visualization/threat-analysis/computes/{compute-id}/related-ids-rules.
  • To get equivalent rule counts for groups instead of computes, use POST /visualization/security-analysis/groups/related-rule-counts.
Request
URI
POST
https://{api_host}/intelligence/visualization/security-analysis/computes/related-rule-counts
COPY
Request Body

Wrapper request for ComputesRelatedRuleCounts

VizComputesRelatedRuleCountsRequest of type(s) application/json
Required  
This request body class requires all of the following: VizTimeIntervalListSiteRequest , InlineVizComputesRelatedRuleCountsRequest1
{
    "start_time": 0,
    "site_id": "17f7c7e5-7f8c-490a-97e9-b9c9193c45e1",
    "compute_ids": [
        "503bc0a0-d759-26c0-c367-5b487003bb0f"
    ]
}
Authentication
This operation uses the following authentication methods.
Responses
200

success

Returns RelatedRuleCountsResult of type(s) application/json
{
    "results": [
        {
            "entity_id": "503bc0a0-d759-26c0-c367-5b487003bb0f",
            "dfw_rule_count": 32,
            "ids_rule_count": 3
        }
    ]
}
array of object
results
Optional

The list of entity rule counts.


400

Bad Request

Returns BadRequest of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


401

Unauthorized

Returns Unauthorized of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


403

Forbidden

Returns Forbidden of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


412

Precondition Failed

Returns PreconditionFailed of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


428

Precondition Required

Returns PreconditionRequired of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


429

Too Many Requests

Returns TooManyRequests of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


default

Error

Returns Error of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


Code Samples
COPY
                    curl -X POST -H 'Authorization: <value>' -H 'Content-Type: application/json' -d '{}' https://{api_host}/intelligence/visualization/security-analysis/computes/related-rule-counts