Report security connector event details
POST https://{{host}}/etp-report/v3/configs/:configId/sinkhole-events/details
Lists Security Connector events for a given time period.
Request Params
Key | Datatype | Required | Description |
---|---|---|---|
accountSwitchKey | string | (Optional) For customers who manage more than one account, this runs the operation from another account. The Identity and Access Management API provides a list of available account switch keys. |
Request Body
{"endTimeSec"=>1589965237, "orderBy"=>"DESC", "pageNumber"=>1, "pageSize"=>5, "startTimeSec"=>1587459637}
HEADERS
Key | Datatype | Required | Description |
---|---|---|---|
Content-Type | string | ||
Accept | string |
RESPONSES
status: OK
[{"configId":1100,"decryptedMachineName":"N/A","decryptedSourceIP":"192.0.2.141","destinationPort":443,"encryptedMachineName":"ZMwPWdbcJT/cBpscakcE262I/w==","encryptedSourceIP":"dlRYs2/etXv09H9yh3DTnejiLXazdMoWjDP7aaWS","eventId":"1633424825021#564D8828-42DF-EEA6-6215-FC31763BB807#628631d3ffdf4734a952931244b5e03e","eventTime":"2021-10-05T09:07:05Z","hitCount":1,"hostname":"www.yahoo.com","internalIP":"N/A","l4Protocol":"TCP","l7Protocol":"HTTPS","machineNames":["N/A"],"redirectType":"HTTP-Explicit","sinkholeIP":"192.0.2.81","sinkholeId":"564D8828-42DF-EEA6-6215-FC31763BB807","sinkholeName":"564D8828-42DF-EEA6-6215-FC31763BB807","sourcePort":39006,"url":"N/A","userAgent":"curl/7.68.0"}]