Retrieves event statistics per given dimension of a request characteristics. A WAAP Event represents a request observed by the system. The report contains the total, blocked, suppressed, and allowed event counts for top ten points in the selected dimension.
API key for authentication. Make sure to include the word apikey, followed by a single space and then your token.
Example: apikey 1234$abcdef
A request characterisics dimension
country, rule, org, action, ip, useragent, target Set of domains
Filter data items starting from a specified date in ISO 8601 format
"2024-04-13T00:00:00+01:00"
Filter data items up to a specified end date in ISO 8601 format. If not provided, defaults to the current date and time.
"2024-04-14T12:00:00Z"
Successful Response
A collection of event counts per dimension values over a time span.
Total number of observed requests. First element of the tuple is a key, the second one is its counter value. The key refers to a point in the requested dimension (e.g., an IP address). Results are ordered by the counter value in descending order.
[["1.2.3.4", 100000], ["5.6.7.8", 80000]]Number of blocked request events, with the same keys and formatted the same as in the total field.
[["1.2.3.4", 2000], ["5.6.7.8", 1000]]Number of requests observed in monitoring mode that would have been blocked otherwise.
[["1.2.3.4", 1500], ["5.6.7.8", 1100]]Number of requests passed due to a permissive security rule.
[["1.2.3.4", 1000], ["5.6.7.8", 900]]Additional information, depending on the selected dimension. Keys refer to the items in the result (first value of a tuple).
{
"1.2.3.4": {
"country": "SG",
"org": "Singapore Networks"
}
}