Threat events

Number of APIs: 3

1. Report threat event totals

GET https://{{host}}/etp-report/v3/configs/:configId/threat-events/aggregate?dimension={{dimension}}&startTimeSec={{startTimeSec}}&endTimeSec={{endTimeSec}}&filters={{filters}}

Lists the count of threat events, grouped by the chosen query aggregation.

---

2. Report threat event details

POST https://{{host}}/etp-report/v3/configs/:configId/threat-events/details

Provides all threat events records with detailed information.

---

3. Report threat event time series

GET https://{{host}}/etp-report/v3/configs/:configId/threat-events/time-series?dimension={{dimension}}&startTimeSec={{startTimeSec}}&endTimeSec={{endTimeSec}}&filters={{filters}}

Lists threat event totals, aggregated by hour.

---