Log - Flexible Secure Gateway API References (1.10.0)
Download OpenAPI specification:Download
Get specific cell-group's security logs.
Get Traffic Logs
Get traffic logs.
Authorizations:
path Parameters
| cell_group_id required | string The ID of the cell group. |
query Parameters
| receiveTimeFrom | string ^[0-9]{4}-(0[1-9]{1}|1[0-2]{1})-(0[1-9]|[1-2][0-9]|3[0-1])T(0[0-9]|1[0-9]|2[0-3]):(0[0-9]|[1-5][0-9]):(0[0-9]|[1-5][0-9])Z$ The start time for search. |
| receiveTimeTo | string ^[0-9]{4}-(0[1-9]{1}|1[0-2]{1})-(0[1-9]|[1-2][0-9]|3[0-1])T(0[0-9]|1[0-9]|2[0-3]):(0[0-9]|[1-5][0-9]):(0[0-9]|[1-5][0-9])Z$ The end time for search. |
| offset | integer [ 0 .. 10000000 ] Default: 0 The offset for the displaying rows. |
| limit | integer [ 0 .. 5000 ] Default: 1 The limit for the displaying rows. |
| sort | string Default: "timestamp:desc" The query for sort (specify like key1:desc,key2:asc). |
| filterType | string Default: "exact" Enum: "exact" "partial" "regexp" Specify filter type of query string for logs keys. |
| action | string Filter by the action type. |
| actionFlags | string Filter by the action flags. |
| actionSource | string Filter by the action source. |
| application | string Filter by the application name. |
| bytes | string Filter by the total bytes. |
| bytesReceived | string Filter by the received bytes. |
| bytesSent | string Filter by the sent bytes. |
| category | string Filter by the category. |
| configVersion | string Filter by the configuration version. |
| cpadding | string Filter by the cpadding. |
| destinationAddress | string Filter by the destination address. |
| destinationCountry | string Filter by the destination country. |
| destinationPort | string Filter by the destination port. |
| destinationUser | string Filter by the destination user. |
| destinationVmUuid | string Filter by the destination VM UUID. |
| destinationZone | string Filter by the destination zone. |
| deviceName | string Filter by the device name. |
| dgHierarchyLevel1 | string Filter by the data group hierarchy level 1. |
| dgHierarchyLevel2 | string Filter by the data group hierarchy level 2. |
| dgHierarchyLevel3 | string Filter by the data group hierarchy level 3. |
| dgHierarchyLevel4 | string Filter by the data group hierarchy level 4. |
| domain | string Filter by the domain. |
| elapsedTimeSec | string Filter by the elapsed time in seconds. |
| flags | string Filter by the log flags. |
| generateTime | string Filter by the log generation time. |
| inboundInterface | string Filter by the inbound interface. |
| ipProtocol | string Filter by the IP protocol. |
| logAction | string Filter by the log action. |
| monitorTagImei | string Filter by the monitor tag IMEI. |
| natDestinationIp | string Filter by the NAT destination IP. |
| natDestinationPort | string Filter by the NAT destination port. |
| natSourceIp | string Filter by the NAT source IP. |
| natSourcePort | string Filter by the NAT source port. |
| outboundInterface | string Filter by the outbound interface. |
| packets | string Filter by the total packets. |
| packetsReceived | string Filter by the received packets. |
| packetsSent | string Filter by the sent packets. |
| parentSessionId | string Filter by the parent session ID. |
| parentSessionStartTime | string Filter by the parent session start time. |
| receiveTime | string Filter by the receive time. |
| repeatCount | string Filter by the repeat count. |
| rule | string Filter by the rule. |
| sctpAssociationId | string Filter by the SCTP association ID. |
| sctpChunks | string Filter by the SCTP chunks. |
| sctpChunksReceived | string Filter by the SCTP chunks received. |
| sctpChunksSent | string Filter by the SCTP chunks sent. |
| sequenceNumber | string Filter by the sequence number. |
| serial | string Filter by the serial number. |
| sessionEndReason | string Filter by the session end reason. |
| sessionId | string Filter by the session ID. |
| sourceAddress | string Filter by the source address. |
| sourceCountry | string Filter by the source country. |
| sourcePort | string Filter by the source port. |
| sourceUser | string Filter by the source user. |
| sourceVmUuid | string Filter by the source VM UUID. |
| sourceZone | string Filter by the source zone. |
| startTime | string Filter by the start time. |
| threatContentType | string Filter by the threat content type. |
| timeLogged | string Filter by the time logged. |
| tpadding | string Filter by the tpadding. |
| tunnel | string Filter by the tunnel. |
| tunnelIdImsi | string Filter by the tunnel ID (IMSI). |
| type | string Filter by the log type. |
| virtualSystem | string Filter by the virtual system. |
| virtualSystemName | string Filter by the virtual system name. |
| uuidForRule | string Filter by the UUID for the rule. |
| http2Connection | string Filter by the HTTP/2 connection. |
| linkChangeCount | string Filter by the link change count. |
| policyId | string Filter by the policy ID. |
| linkSwitches | string Filter by the link switches. |
| sdwanCluster | string Filter by the SD-WAN cluster. |
| sdwanDeviceType | string Filter by the SD-WAN device type. |
| sdwanClusterType | string Filter by the SD-WAN cluster type. |
| sdwanSite | string Filter by the SD-WAN site. |
| dynusergroupName | string Filter by the dynamic user group name. |
header Parameters
| X-Auth-Token required | string The keystone token. |
Responses
OK
Bad Request
Unauthorized
Forbidden
Not Found
Internal Server Error
Response samples
- 200
- 400
- 401
- 403
- 404
- 500
{- "trafficLogs": [
- {
- "action": "allow",
- "actionFlags": "0x0",
- "actionSource": "from-policy",
- "application": "web-browsing",
- "bytes": "1201356",
- "bytesReceived": "255081",
- "bytesSent": "946275",
- "category": "shopping",
- "configVersion": "2049",
- "cpadding": "0",
- "destinationAddress": "203.0.113.4",
- "destinationCountry": "Japan",
- "destinationPort": "443",
- "destinationUser": "",
- "destinationVmUuid": "",
- "destinationZone": "Untrust",
- "deviceName": "35c439-utm",
- "dgHierarchyLevel1": "0",
- "dgHierarchyLevel2": "0",
- "dgHierarchyLevel3": "0",
- "dgHierarchyLevel4": "0",
- "domain": "1",
- "elapsedTimeSec": "1809",
- "flags": "0x1500070",
- "generateTime": "2021/02/08 09:55:24",
- "inboundInterface": "ethernet1/2",
- "ipProtocol": "tcp",
- "logAction": "Syslog_Forward",
- "monitorTagImei": "",
- "natDestinationIp": "203.0.113.4",
- "natDestinationPort": "443",
- "natSourceIp": "203.0.113.2",
- "natSourcePort": "29013",
- "outboundInterface": "ethernet1/1",
- "packets": "2432",
- "packetsReceived": "864",
- "packetsSent": "1568",
- "parentSessionId": "0",
- "parentSessionStartTime": "",
- "receiveTime": "2021/02/08 09:55:24",
- "repeatCount": "1",
- "rule": "test01",
- "sctpAssociationId": "0",
- "sctpChunks": "0",
- "sctpChunksReceived": "0",
- "sctpChunksSent": "0",
- "sequenceNumber": "13119",
- "serial": "000000000000000",
- "sessionEndReason": "tcp-fin",
- "sessionId": "169882",
- "sourceAddress": "10.0.0.2",
- "sourceCountry": "10.0.0.0-10.255.255.255",
- "sourcePort": "3567",
- "sourceUser": "",
- "sourceVmUuid": "",
- "sourceZone": "Trust",
- "startTime": "2021/02/08 09:24:58",
- "threatContentType": "end",
- "timeLogged": "2021/02/08 09:55:24",
- "tpadding": "0",
- "tunnel": "N/A",
- "tunnelIdImsi": "0",
- "type": "TRAFFIC",
- "virtualSystem": "vsys1",
- "virtualSystemName": "",
- "uuidForRule": "",
- "http2Connection": "",
- "linkChangeCount": "",
- "policyId": "",
- "linkSwitches": "",
- "sdwanCluster": "",
- "sdwanDeviceType": "",
- "sdwanClusterType": "",
- "sdwanSite": "",
- "dynusergroupName": ""
}, - {
- "action": "allow",
- "actionFlags": "0x0",
- "actionSource": "from-policy",
- "application": "ssl",
- "bytes": "5185",
- "bytesReceived": "4523",
- "bytesSent": "662",
- "category": "any",
- "configVersion": "2049",
- "cpadding": "0",
- "destinationAddress": "203.0.113.6",
- "destinationCountry": "United States",
- "destinationPort": "443",
- "destinationUser": "",
- "destinationVmUuid": "",
- "destinationZone": "Untrust",
- "deviceName": "35c439-utm",
- "dgHierarchyLevel1": "0",
- "dgHierarchyLevel2": "0",
- "dgHierarchyLevel3": "0",
- "dgHierarchyLevel4": "0",
- "domain": "1",
- "elapsedTimeSec": "253",
- "flags": "0x1400070",
- "generateTime": "2021/02/08 09:51:08",
- "inboundInterface": "ethernet1/2",
- "ipProtocol": "tcp",
- "logAction": "Syslog_Forward",
- "monitorTagImei": "",
- "natDestinationIp": "203.0.113.6",
- "natDestinationPort": "443",
- "natSourceIp": "203.0.113.2",
- "natSourcePort": "7431",
- "outboundInterface": "ethernet1/1",
- "packets": "16",
- "packetsReceived": "9",
- "packetsSent": "7",
- "parentSessionId": "0",
- "parentSessionStartTime": "",
- "receiveTime": "2021/02/08 09:51:08",
- "repeatCount": "1",
- "rule": "test01",
- "sctpAssociationId": "0",
- "sctpChunks": "0",
- "sctpChunksReceived": "0",
- "sctpChunksSent": "0",
- "sequenceNumber": "13118",
- "serial": "000000000000000",
- "sessionEndReason": "tcp-fin",
- "sessionId": "171933",
- "sourceAddress": "10.0.0.2",
- "sourceCountry": "10.0.0.0-10.255.255.255",
- "sourcePort": "18792",
- "sourceUser": "",
- "sourceVmUuid": "",
- "sourceZone": "Trust",
- "startTime": "2021/02/08 09:46:38",
- "threatContentType": "end",
- "timeLogged": "2021/02/08 09:51:08",
- "tpadding": "0",
- "tunnel": "N/A",
- "tunnelIdImsi": "0",
- "type": "TRAFFIC",
- "virtualSystem": "vsys1",
- "virtualSystemName": "",
- "uuidForRule": "",
- "http2Connection": "",
- "linkChangeCount": "",
- "policyId": "",
- "linkSwitches": "",
- "sdwanCluster": "",
- "sdwanDeviceType": "",
- "sdwanClusterType": "",
- "sdwanSite": "",
- "dynusergroupName": ""
}
]
}Get Threat Logs
Get threat logs.
Authorizations:
path Parameters
| cell_group_id required | string The ID of the cell group. |
query Parameters
| receiveTimeFrom | string ^[0-9]{4}-(0[1-9]{1}|1[0-2]{1})-(0[1-9]|[1-2][0-9]|3[0-1])T(0[0-9]|1[0-9]|2[0-3]):(0[0-9]|[1-5][0-9]):(0[0-9]|[1-5][0-9])Z$ The start time for search. |
| receiveTimeTo | string ^[0-9]{4}-(0[1-9]{1}|1[0-2]{1})-(0[1-9]|[1-2][0-9]|3[0-1])T(0[0-9]|1[0-9]|2[0-3]):(0[0-9]|[1-5][0-9]):(0[0-9]|[1-5][0-9])Z$ The end time for search. |
| offset | integer [ 0 .. 10000000 ] Default: 0 The offset for the displaying rows. |
| limit | integer [ 0 .. 5000 ] Default: 1 The limit for the displaying rows. |
| sort | string Default: "timestamp:desc" The query for sort (specify like key1:desc,key2:asc). |
| filterType | string Default: "exact" Enum: "exact" "partial" "regexp" Specify filter type of query string for logs keys. |
| action | string Filter by the action type. |
| actionFlags | string Filter by the action flags. |
| application | string Filter by the application name. |
| category | string Filter by the category. |
| cloud | string Filter by the cloud. |
| configVersion | string Filter by the configuration version. |
| contenttype | string Filter by the content type. |
| contentver | string Filter by the content version. |
| cpadding | string Filter by the cpadding. |
| destinationAddress | string Filter by the destination address. |
| destinationCountry | string Filter by the destination country. |
| destinationPort | string Filter by the destination port. |
| destinationUser | string Filter by the destination user. |
| destinationVmUuid | string Filter by the destination VM UUID. |
| destinationZone | string Filter by the destination zone. |
| deviceName | string Filter by the device name. |
| dgHierarchyLevel1 | string Filter by the data group hierarchy level 1. |
| dgHierarchyLevel2 | string Filter by the data group hierarchy level 2. |
| dgHierarchyLevel3 | string Filter by the data group hierarchy level 3. |
| dgHierarchyLevel4 | string Filter by the data group hierarchy level 4. |
| direction | string Filter by the direction. |
| domain | string Filter by the domain. |
| fileUrl | string Filter by the file URL. |
| filedigest | string Filter by the file digest. |
| filetype | string Filter by the file type. |
| flags | string Filter by the flags. |
| generateTime | string Filter by the generate time. |
| httpHeaders | string Filter by the HTTP headers. |
| httpMethod | string Filter by the HTTP method. |
| inboundInterface | string Filter by the inbound interface. |
| ipProtocol | string Filter by the IP protocol. |
| logAction | string Filter by the log action. |
| monitorTagImei | string Filter by the monitor tag IMEI. |
| natDestinationIp | string Filter by the NAT destination IP. |
| natDestinationPort | string Filter by the NAT destination port. |
| natSourceIp | string Filter by the NAT source IP. |
| natSourcePort | string Filter by the NAT source port. |
| outboundInterface | string Filter by the outbound interface. |
| parentSessionId | string Filter by the parent session ID. |
| parentSessionStartTime | string Filter by the parent session start time. |
| payloadProtocolId | string Filter by the payload protocol ID. |
| pcapId | string Filter by the pcap ID. |
| receiveTime | string Filter by the receive time. |
| recipient | string Filter by the recipient. |
| referer | string Filter by the referer. |
| repeatCount | string Filter by the repeat count. |
| reportid | string Filter by the report ID. |
| rule | string Filter by the rule. |
| sctpAssociationId | string Filter by the SCTP association ID. |
| sender | string Filter by the sender. |
| sequenceNumber | string Filter by the sequence number. |
| serial | string Filter by the serial number. |
| sessionId | string Filter by the session ID. |
| severity | string Filter by the severity. |
| sigFlags | string Filter by the signature flags. |
| sourceAddress | string Filter by the source address. |
| sourceCountry | string Filter by the source country. |
| sourcePort | string Filter by the source port. |
| sourceUser | string Filter by the source user. |
| sourceVmUuid | string Filter by the source VM UUID. |
| sourceZone | string Filter by the source zone. |
| subject | string Filter by the subject. |
| thrCategory | string Filter by the threat category. |
| threatContentName | string Filter by the threat content name. |
| threatContentType | string Filter by the threat content type. |
| timeLogged | string Filter by the time logged. |
| tunnel | string Filter by the tunnel. |
| tunnelIdImsi | string Filter by the tunnel ID (IMSI). |
| type | string Filter by the log type. |
| urlFilename | string Filter by the URL filename. |
| urlIdx | string Filter by the URL index. |
| userAgent | string Filter by the user agent. |
| virtualSystemName | string Filter by the virtual system name. |
| virtualSystem | string Filter by the virtual system. |
| xff | string Filter by the X-Forwarded-For header. |
| urlCategoryList | string Filter by the URL category list. |
| uuidForRule | string Filter by the UUID for the rule. |
| http2Connection | string Filter by the HTTP/2 connection. |
| dynusergroupName | string Filter by the dynamic user group name. |
header Parameters
| X-Auth-Token required | string The keystone token. |
Responses
OK
Bad Request
Unauthorized
Forbidden
Not Found
Internal Server Error
Response samples
- 200
- 400
- 401
- 403
- 404
- 500
{- "threatLogs": [
- {
- "action": "block-url",
- "actionFlags": "0x2000000000000000",
- "application": "web-browsing",
- "category": "block-list",
- "cloud": "",
- "configVersion": "2049",
- "contenttype": "",
- "contentver": "AppThreat-0-0",
- "cpadding": "0",
- "destinationAddress": "203.0.113.3",
- "destinationCountry": "Japan",
- "destinationPort": "443",
- "destinationUser": "",
- "destinationVmUuid": "",
- "destinationZone": "Untrust",
- "deviceName": "35c439-utm",
- "dgHierarchyLevel1": "0",
- "dgHierarchyLevel2": "0",
- "dgHierarchyLevel3": "0",
- "dgHierarchyLevel4": "0",
- "direction": "client-to-server",
- "domain": "1",
- "fileUrl": "",
- "filedigest": "",
- "filetype": "",
- "flags": "0x1503000",
- "generateTime": "2021/02/09 01:40:23",
- "httpHeaders": "",
- "httpMethod": "get",
- "inboundInterface": "ethernet1/2",
- "ipProtocol": "tcp",
- "logAction": "Syslog_Forward",
- "monitorTagImei": "",
- "natDestinationIp": "203.0.113.3",
- "natDestinationPort": "443",
- "natSourceIp": "203.0.113.2",
- "natSourcePort": "33009",
- "outboundInterface": "ethernet1/1",
- "parentSessionId": "0",
- "parentSessionStartTime": "",
- "payloadProtocolId": "4294967295",
- "pcapId": "0",
- "receiveTime": "2021/02/09 01:40:23",
- "recipient": "",
- "referer": "",
- "repeatCount": "1",
- "reportid": "0",
- "rule": "test01",
- "sctpAssociationId": "0",
- "sender": "",
- "sequenceNumber": "7954",
- "serial": "000000000000000",
- "sessionId": "241551",
- "severity": "informational",
- "sigFlags": "0x0",
- "sourceAddress": "10.0.0.2",
- "sourceCountry": "10.0.0.0-10.255.255.255",
- "sourcePort": "17626",
- "sourceUser": "",
- "sourceVmUuid": "",
- "sourceZone": "Trust",
- "subject": "",
- "thrCategory": "unknown",
- "threatContentName": "(9999)",
- "threatContentType": "url",
- "timeLogged": "2021/02/09 01:40:23",
- "tunnel": "N/A",
- "tunnelIdImsi": "0",
- "type": "THREAT",
- "urlFilename": "www.ntt.com/",
- "urlIdx": "1",
- "userAgent": "",
- "virtualSystem": "vsys1",
- "virtualSystemName": "",
- "xff": "",
- "urlCategoryList": "block-allow_filter,computer-and-internet-info,low-risk",
- "uuidForRule": "c4b90ef9-3c0d-4883-91d0-691fd76b68fe",
- "http2Connection": "0",
- "dynusergroupName": ""
}, - {
- "action": "alert",
- "actionFlags": "0x2000000000000000",
- "application": "google-base",
- "category": "search-engines",
- "cloud": "",
- "configVersion": "2049",
- "contenttype": "text/html",
- "contentver": "AppThreat-0-0",
- "cpadding": "0",
- "destinationAddress": "203.0.113.1",
- "destinationCountry": "United States",
- "destinationPort": "443",
- "destinationUser": "",
- "destinationVmUuid": "",
- "destinationZone": "Untrust",
- "deviceName": "35c439-utm",
- "dgHierarchyLevel1": "0",
- "dgHierarchyLevel2": "0",
- "dgHierarchyLevel3": "0",
- "dgHierarchyLevel4": "0",
- "direction": "client-to-server",
- "domain": "1",
- "fileUrl": "",
- "filedigest": "",
- "filetype": "",
- "flags": "0x140b000",
- "generateTime": "2021/02/09 01:39:23",
- "httpHeaders": "",
- "httpMethod": "post",
- "inboundInterface": "ethernet1/2",
- "ipProtocol": "tcp",
- "logAction": "Syslog_Forward",
- "monitorTagImei": "",
- "natDestinationIp": "203.0.113.1",
- "natDestinationPort": "443",
- "natSourceIp": "203.0.113.2",
- "natSourcePort": "37890",
- "outboundInterface": "ethernet1/1",
- "parentSessionId": "0",
- "parentSessionStartTime": "",
- "payloadProtocolId": "4294967295",
- "pcapId": "0",
- "receiveTime": "2021/02/08 09:46:41",
- "recipient": "",
- "referer": "",
- "repeatCount": "1",
- "reportid": "0",
- "rule": "test01",
- "sctpAssociationId": "0",
- "sender": "",
- "sequenceNumber": "7512",
- "serial": "000000000000000",
- "sessionId": "171844",
- "severity": "informational",
- "sigFlags": "0x0",
- "sourceAddress": "10.0.0.2",
- "sourceCountry": "10.0.0.0-10.255.255.255",
- "sourcePort": "7605",
- "sourceUser": "",
- "sourceVmUuid": "",
- "sourceZone": "Trust",
- "subject": "",
- "thrCategory": "unknown",
- "threatContentName": "(9999)",
- "threatContentType": "url",
- "timeLogged": "2021/02/09 01:39:23",
- "tunnel": "N/A",
- "tunnelIdImsi": "0",
- "type": "THREAT",
- "urlFilename": "www.google.co.jp/",
- "urlIdx": "3",
- "userAgent": "",
- "virtualSystem": "vsys1",
- "virtualSystemName": "",
- "xff": "",
- "urlCategoryList": "block-allow_filter,computer-and-internet-info,low-risk",
- "uuidForRule": "c4b90ef9-3c0d-4883-91d0-691fd76b68fe",
- "http2Connection": "0",
- "dynusergroupName": ""
}
]
}Get Authentication Logs
Get authentication logs.
Authorizations:
path Parameters
| cell_group_id required | string The ID of the cell group. |
query Parameters
| receiveTimeFrom | string ^[0-9]{4}-(0[1-9]{1}|1[0-2]{1})-(0[1-9]|[1-2][0-9]|3[0-1])T(0[0-9]|1[0-9]|2[0-3]):(0[0-9]|[1-5][0-9]):(0[0-9]|[1-5][0-9])Z$ The start time for search. |
| receiveTimeTo | string ^[0-9]{4}-(0[1-9]{1}|1[0-2]{1})-(0[1-9]|[1-2][0-9]|3[0-1])T(0[0-9]|1[0-9]|2[0-3]):(0[0-9]|[1-5][0-9]):(0[0-9]|[1-5][0-9])Z$ The end time for search. |
| offset | integer [ 0 .. 10000000 ] Default: 0 The offset for the displaying rows. |
| limit | integer [ 0 .. 5000 ] Default: 1 The limit for the displaying rows. |
| sort | string Default: "timestamp:desc" The query for sort (specify like key1:desc,key2:asc). |
| filterType | string Default: "exact" Enum: "exact" "partial" "regexp" Specify filter type of query string for logs keys. |
| domain | string Filter by the domain. |
| receiveTime | string Filter by the receive time. |
| serial | string Filter by the serial number. |
| type | string Filter by the log type. |
| threatContentType | string Filter by the threat content type. |
| configVersion | string Filter by the configuration version. |
| generateTime | string Filter by the generate time. |
| virtualSystem | string Filter by the virtual system. |
| sourceIp | string Filter by the source IP address. |
| user | string Filter by the user. |
| normalizeUser | string Filter by the normalized user. |
| object | string Filter by the object. |
| authenticationPolicy | string Filter by the authentication policy. |
| repeatCount | string Filter by the repeat count. |
| authenticationId | string Filter by the authentication ID. |
| vendor | string Filter by the vendor. |
| logAction | string Filter by the log action. |
| serverprofile | string Filter by the server profile. |
| desc | string Filter by the description. |
| clientType | string Filter by the client type. |
| eventType | string Filter by the event type. |
| factorNumber | string Filter by the factor number. |
| sequenceNumber | string Filter by the sequence number. |
| actionFlags | string Filter by the action flags. |
| dgHierarchyLevel1 | string Filter by the data group hierarchy level 1. |
| dgHierarchyLevel2 | string Filter by the data group hierarchy level 2. |
| dgHierarchyLevel3 | string Filter by the data group hierarchy level 3. |
| dgHierarchyLevel4 | string Filter by the data group hierarchy level 4. |
| virtualSystemName | string Filter by the virtual system name. |
| deviceName | string Filter by the device name. |
| virtualSystemId | string Filter by the virtual system ID. |
| authproto | string Filter by the authentication protocol. |
| uuidForRule | string Filter by the UUID for the rule. |
header Parameters
| X-Auth-Token required | string The keystone token. |
Responses
OK
Bad Request
Unauthorized
Forbidden
Not Found
Internal Server Error
Response samples
- 200
- 400
- 401
- 403
- 404
- 500
{- "authenticationLogs": [
- {
- "domain": "1",
- "receiveTime": "2021/12/01 09:27:51",
- "serial": "007054000162134",
- "type": "AUTH",
- "threatContentType": "Unknown",
- "configVersion": "2305",
- "generateTime": "2021/12/01 09:27:51",
- "virtualSystem": "vsys1",
- "sourceIp": "10.100.10.42",
- "user": "",
- "normalizeUser": "",
- "object": "auth_seq_test",
- "authenticationPolicy": "auth-policy-test",
- "repeatCount": "1",
- "authenticationId": "6997317030235887792",
- "vendor": "",
- "logAction": "",
- "serverprofile": "",
- "desc": "No user activity after prompted for credentials from AUTH-PORTAL.",
- "clientType": "Authentication Portal",
- "eventType": "Authentication Timeout",
- "factorNumber": "1",
- "sequenceNumber": "9584",
- "actionFlags": "0x0",
- "dgHierarchyLevel1": "0",
- "dgHierarchyLevel2": "0",
- "dgHierarchyLevel3": "0",
- "dgHierarchyLevel4": "0",
- "virtualSystemName": "",
- "deviceName": "b8deb3-utm",
- "virtualSystemId": "1",
- "authproto": "",
- "uuidForRule": ""
}, - {
- "domain": "1",
- "receiveTime": "2021/12/01 09:04:04",
- "serial": "007054000162134",
- "type": "AUTH",
- "threatContentType": "Unknown",
- "configVersion": "2305",
- "generateTime": "2021/12/01 09:04:04",
- "virtualSystem": "vsys1",
- "sourceIp": "10.100.10.42",
- "user": "",
- "normalizeUser": "",
- "object": "auth_seq_test",
- "authenticationPolicy": "auth-policy-test",
- "repeatCount": "1",
- "authenticationId": "6997317030235887790",
- "vendor": "",
- "logAction": "",
- "serverprofile": "",
- "desc": "No user activity after prompted for credentials from AUTH-PORTAL.",
- "clientType": "Authentication Portal",
- "eventType": "Authentication Timeout",
- "factorNumber": "1",
- "sequenceNumber": "9583",
- "actionFlags": "0x0",
- "dgHierarchyLevel1": "0",
- "dgHierarchyLevel2": "0",
- "dgHierarchyLevel3": "0",
- "dgHierarchyLevel4": "0",
- "virtualSystemName": "",
- "deviceName": "b8deb3-utm",
- "virtualSystemId": "1",
- "authproto": "",
- "uuidForRule": ""
}
]
}Get User-ID Logs
Get User-ID logs.
Authorizations:
path Parameters
| cell_group_id required | string The ID of the cell group. |
query Parameters
| receiveTimeFrom | string ^[0-9]{4}-(0[1-9]{1}|1[0-2]{1})-(0[1-9]|[1-2][0-9]|3[0-1])T(0[0-9]|1[0-9]|2[0-3]):(0[0-9]|[1-5][0-9]):(0[0-9]|[1-5][0-9])Z$ The start time for search. |
| receiveTimeTo | string ^[0-9]{4}-(0[1-9]{1}|1[0-2]{1})-(0[1-9]|[1-2][0-9]|3[0-1])T(0[0-9]|1[0-9]|2[0-3]):(0[0-9]|[1-5][0-9]):(0[0-9]|[1-5][0-9])Z$ The end time for search. |
| offset | integer [ 0 .. 10000000 ] Default: 0 The offset for the displaying rows. |
| limit | integer [ 0 .. 5000 ] Default: 1 The limit for the displaying rows. |
| sort | string Default: "timestamp:desc" The query for sort (specify like key1:desc,key2:asc). |
| filterType | string Default: "exact" Enum: "exact" "partial" "regexp" Specify filter type of query string for logs keys. |
| domain | string Filter by the domain. |
| receiveTime | string Filter by the receive time. |
| serial | string Filter by the serial number. |
| type | string Filter by the log type. |
| threatContentType | string Filter by the threat content type. |
| configVersion | string Filter by the configuration version. |
| generateTime | string Filter by the generate time. |
| virtualSystem | string Filter by the virtual system. |
| sourceIp | string Filter by the source IP address. |
| user | string Filter by the user. |
| dataSourceName | string Filter by the data source name. |
| eventId | string Filter by the event ID. |
| repeatCount | string Filter by the repeat count. |
| timeout | string Filter by the timeout. |
| beginport | string Filter by the begin port. |
| endport | string Filter by the end port. |
| dataSource | string Filter by the data source. |
| dataSourceType | string Filter by the data source type. |
| sequenceNumber | string Filter by the sequence number. |
| actionFlags | string Filter by the action flags. |
| dgHierarchyLevel1 | string Filter by the data group hierarchy level 1. |
| dgHierarchyLevel2 | string Filter by the data group hierarchy level 2. |
| dgHierarchyLevel3 | string Filter by the data group hierarchy level 3. |
| dgHierarchyLevel4 | string Filter by the data group hierarchy level 4. |
| virtualSystemName | string Filter by the virtual system name. |
| deviceName | string Filter by the device name. |
| virtualSystemId | string Filter by the virtual system ID. |
| factorType | string Filter by the factor type. |
| factorCompletionTime | string Filter by the factor completion time. |
| factorNumber | string Filter by the factor number. |
| ugflags | string Filter by the user group flags. |
| userbysource | string Filter by the user by source. |
header Parameters
| X-Auth-Token required | string The keystone token. |
Responses
OK
Bad Request
Unauthorized
Forbidden
Not Found
Internal Server Error
Response samples
- 200
- 400
- 401
- 403
- 404
- 500
{- "userIdLogs": [
- {
- "domain": "1",
- "receiveTime": "2021/11/26 02:29:45",
- "serial": "007054000162134",
- "type": "USERID",
- "threatContentType": "login",
- "configVersion": "2305",
- "generateTime": "2021/11/26 02:29:45",
- "virtualSystem": "vsys1",
- "sourceIp": "fe80::d0dd:a902:cdcf:2139",
- "user": "ad-test.example.com\\ouuser01",
- "dataSourceName": "ad-test",
- "eventId": "0",
- "repeatCount": "1",
- "timeout": "300",
- "beginport": "0",
- "endport": "0",
- "dataSource": "agent",
- "dataSourceType": "",
- "sequenceNumber": "105244",
- "actionFlags": "0x0",
- "dgHierarchyLevel1": "0",
- "dgHierarchyLevel2": "0",
- "dgHierarchyLevel3": "0",
- "dgHierarchyLevel4": "0",
- "virtualSystemName": "",
- "deviceName": "b8deb3-utm",
- "virtualSystemId": "1",
- "factorType": "",
- "factorCompletionTime": "2021/11/26 02:29:41",
- "factorNumber": "1",
- "ugflags": "0x0",
- "userbysource": "ad-test.example.com\\ouuser01"
}, - {
- "domain": "1",
- "receiveTime": "2021/11/26 02:24:58",
- "serial": "007054000162134",
- "type": "USERID",
- "threatContentType": "login",
- "configVersion": "2305",
- "generateTime": "2021/11/26 02:24:58",
- "virtualSystem": "vsys1",
- "sourceIp": "172.16.200.1",
- "user": "ad-test\\ouuser01",
- "dataSourceName": "ad-test",
- "eventId": "0",
- "repeatCount": "1",
- "timeout": "300",
- "beginport": "0",
- "endport": "0",
- "dataSource": "agent",
- "dataSourceType": "",
- "sequenceNumber": "105243",
- "actionFlags": "0x0",
- "dgHierarchyLevel1": "0",
- "dgHierarchyLevel2": "0",
- "dgHierarchyLevel3": "0",
- "dgHierarchyLevel4": "0",
- "virtualSystemName": "",
- "deviceName": "b8deb3-utm",
- "virtualSystemId": "1",
- "factorType": "",
- "factorCompletionTime": "2021/11/26 02:24:55",
- "factorNumber": "1",
- "ugflags": "0x0",
- "userbysource": "ad-test\\ouuser01"
}
]
}