Views:

Last Updated: 1/22/2020 12:11:06 AM

Get summary of top N computers with a specific event type within a time range.

Supported event types:

-virus: virus detections

-spyware : spyware detections

- wtp: Web Reputation violations

- behavior_monitoring: Behavior Monitoring violations

- network_virus: network virus detections

- url_filtering: URL filtering violations

-device_control: Device Control violations

1. It returns the aggregated summary within one day if time range is not specified.

2. The largest query duration is 30 days.

Request

HTTP Request

GET /SMPI/{version}/service/wfbss/api/summary/computers/{event type}

Parameters

Name

Type

Description

Validation

top

integer

Response top n computers

1 to 100. If not set, default is 100

start_time

integer

Start time of counting interval

Unix timestamp (seconds since 1970-01-01 00:00:00 UTC). end_time - start_time < 30 days

end_time

integer

End time of counting interval

Unix timestamp (seconds since 1970-01-01 00:00:00 UTC). If not set, default is now.

HTTP Request Example

Get summary of top 10 computers with virus detections during last one day :
GET /SMPI/{version}/service/wfbss/api/summary/computers/virus?top=10

Request Body

Do not supply a request body with this method.

Response

Response

If successful, this method returns an HTTP 200 OK status code and a response body with the following structure:

{
  "summary": {
    "computers": [
      {
        "count": 10995,
        "type": 2,
        "id": "7ff7325109ddfa449b8dc2ec0bdeb0aa",
        "cid": "7A13A680-ED79-481D-8E72-73DFCC3527F5"
      }
    ]
  }
}

Name

Type

Description

Length

summary.computers[].count

integer

total count of detections

summary.computers[].type

integer

OS type

1 = windows desktop, 2 = windows server, 3 = mac desktop, 4 = mac server, 5 = android, 6 = ios

summary.computers[].id

string

customer id

summary.computers[].cid

string

device ID