forked from docs/doc-exports
Li, Qiao
914011d51b
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com> Co-authored-by: Li, Qiao <qiaoli@huawei.com> Co-committed-by: Li, Qiao <qiaoli@huawei.com>
213 lines
16 KiB
HTML
213 lines
16 KiB
HTML
<a name="waf_02_0072"></a><a name="waf_02_0072"></a>
|
|
|
|
<h1 class="topictitle1">Querying Event Distribution</h1>
|
|
<div id="body12947069"><div class="section" id="waf_02_0072__section50563647"><h4 class="sectiontitle">Function Description</h4><p class="msonormal" id="waf_02_0072__p42079672">This API is used to query event distribution.</p>
|
|
</div>
|
|
<div class="section" id="waf_02_0072__section2014776"><h4 class="sectiontitle">URI</h4><ul id="waf_02_0072__ul65971603"><li id="waf_02_0072__li56873515">URI format<div class="p" id="waf_02_0072__p42099587"><a name="waf_02_0072__li56873515"></a><a name="li56873515"></a>GET /v1/{project_id}/waf/event/attack/type?from={from}&to={to}&hosts={hostids}<div class="note" id="waf_02_0072__note63241148751"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="waf_02_0072__p23244481054">An example of a URI is as follows:</p>
|
|
<p id="waf_02_0072__p774833712618">GET /v1/3ac26c59e15a4a11bb680a103a29ddb6/waf/event/attack/type?from=1543976973635&to=1563976973635&hosts=3211757cafa3437aae24d760022e79ba&hosts=93029844064b43739b51ca63036fbc4b&hosts=34fe5f5c60ef4e43a9975296765d1217</p>
|
|
</div></div>
|
|
</div>
|
|
</li><li id="waf_02_0072__li43351964">Parameter description
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="waf_02_0072__table54623359" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Path parameters</caption><thead align="left"><tr id="waf_02_0072__row49794519"><th align="left" class="cellrowborder" valign="top" width="25.507449255074494%" id="mcps1.3.2.2.2.1.2.5.1.1"><p id="waf_02_0072__p6824202"><strong id="waf_02_0072__b128864178450">Parameter</strong></p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="17.348265173482652%" id="mcps1.3.2.2.2.1.2.5.1.2"><p id="waf_02_0072__p15889527"><strong id="waf_02_0072__b9149112019454">Mandatory</strong></p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="17.348265173482652%" id="mcps1.3.2.2.2.1.2.5.1.3"><p id="waf_02_0072__p11983300"><strong id="waf_02_0072__b11399162194512">Type</strong></p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="39.796020397960206%" id="mcps1.3.2.2.2.1.2.5.1.4"><p id="waf_02_0072__p31123225"><strong id="waf_02_0072__b1859762374514">Description</strong></p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="waf_02_0072__row37953311"><td class="cellrowborder" valign="top" width="25.507449255074494%" headers="mcps1.3.2.2.2.1.2.5.1.1 "><p id="waf_02_0072__p54319357">project_id</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="17.348265173482652%" headers="mcps1.3.2.2.2.1.2.5.1.2 "><p id="waf_02_0072__p37791836">Yes</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="17.348265173482652%" headers="mcps1.3.2.2.2.1.2.5.1.3 "><p id="waf_02_0072__p41239908">String</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="39.796020397960206%" headers="mcps1.3.2.2.2.1.2.5.1.4 "><p id="waf_02_0072__p52098236">Specifies the project ID.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="waf_02_0072__row66230941"><td class="cellrowborder" valign="top" width="25.507449255074494%" headers="mcps1.3.2.2.2.1.2.5.1.1 "><p id="waf_02_0072__p63106033">from</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="17.348265173482652%" headers="mcps1.3.2.2.2.1.2.5.1.2 "><p id="waf_02_0072__p11315049">Yes</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="17.348265173482652%" headers="mcps1.3.2.2.2.1.2.5.1.3 "><p id="waf_02_0072__p44103790">Long</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="39.796020397960206%" headers="mcps1.3.2.2.2.1.2.5.1.4 "><p id="waf_02_0072__p18857034">Specifies the start time (UTC) in milliseconds. For example, <strong id="waf_02_0072__b846033624812">1548172800000</strong>.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="waf_02_0072__row099415339557"><td class="cellrowborder" valign="top" width="25.507449255074494%" headers="mcps1.3.2.2.2.1.2.5.1.1 "><p id="waf_02_0072__p199961933195515">to</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="17.348265173482652%" headers="mcps1.3.2.2.2.1.2.5.1.2 "><p id="waf_02_0072__p179961533135510">Yes</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="17.348265173482652%" headers="mcps1.3.2.2.2.1.2.5.1.3 "><p id="waf_02_0072__p1799663325516">Long</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="39.796020397960206%" headers="mcps1.3.2.2.2.1.2.5.1.4 "><p id="waf_02_0072__p28177917">Specifies the end time (UTC) in milliseconds. For example, <strong id="waf_02_0072__b85071742184812">1548431999000</strong>.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="waf_02_0072__row6517283"><td class="cellrowborder" valign="top" width="25.507449255074494%" headers="mcps1.3.2.2.2.1.2.5.1.1 "><p id="waf_02_0072__p58137894">hosts</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="17.348265173482652%" headers="mcps1.3.2.2.2.1.2.5.1.2 "><p id="waf_02_0072__p11548945">No</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="17.348265173482652%" headers="mcps1.3.2.2.2.1.2.5.1.3 "><p id="waf_02_0072__p63049357">Array</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="39.796020397960206%" headers="mcps1.3.2.2.2.1.2.5.1.4 "><p id="waf_02_0072__p6724289">Specifies the domain IDs.</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</li></ul>
|
|
</div>
|
|
<div class="section" id="waf_02_0072__section18132989"><h4 class="sectiontitle">Request</h4><p id="waf_02_0072__p103231654201115">Request parameters</p>
|
|
<p class="msonormal" id="waf_02_0072__p7796566">None</p>
|
|
</div>
|
|
<div class="section" id="waf_02_0072__section28979173"><h4 class="sectiontitle">Response</h4><p id="waf_02_0072__p15541130151219">Response parameters</p>
|
|
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="waf_02_0072__table10363184164611" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Parameter description</caption><thead align="left"><tr id="waf_02_0072__row71754174287"><th align="left" class="cellrowborder" valign="top" width="33.333333333333336%" id="mcps1.3.4.3.2.4.1.1"><p id="waf_02_0072__p18175617172815"><strong id="waf_02_0072__b471271633715">Parameter</strong></p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="33.333333333333336%" id="mcps1.3.4.3.2.4.1.2"><p id="waf_02_0072__p131751517202810"><strong id="waf_02_0072__b423135825113">Type</strong></p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="33.333333333333336%" id="mcps1.3.4.3.2.4.1.3"><p id="waf_02_0072__p1817541712287"><strong id="waf_02_0072__b1097691883715">Description</strong></p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="waf_02_0072__row5175617122810"><td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.1 "><p id="waf_02_0072__p1017561762818">xss</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.2 "><p id="waf_02_0072__p417501792816">Integer</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.3 "><p id="waf_02_0072__p2017521722812">Specifies the number of XSS attacks detected within the time range.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="waf_02_0072__row51751517202817"><td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.1 "><p id="waf_02_0072__p81753172289">sqli</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.2 "><p id="waf_02_0072__p9175141710285">Integer</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.3 "><p id="waf_02_0072__p81752173285">Specifies the number of SQL injection attacks detected within the time range.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="waf_02_0072__row117511712818"><td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.1 "><p id="waf_02_0072__p111751017172811">cmdi</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.2 "><p id="waf_02_0072__p12175131762819">Integer</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.3 "><p id="waf_02_0072__p417513177284">Specifies the number of command injection attacks detected within the time range.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="waf_02_0072__row1175111710285"><td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.1 "><p id="waf_02_0072__p11765173288">cc</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.2 "><p id="waf_02_0072__p1517691762811">Integer</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.3 "><p id="waf_02_0072__p1176141722817">Specifies the number of CC attacks detected within the time range.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="waf_02_0072__row917614171287"><td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.1 "><p id="waf_02_0072__p417641772815">custom</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.2 "><p id="waf_02_0072__p1517661762815">Integer</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.3 "><p id="waf_02_0072__p11176151732811">Specifies the number of Precise Protection events detected within the time range.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="waf_02_0072__row10176417112813"><td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.1 "><p id="waf_02_0072__p31761417132817">illegal</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.2 "><p id="waf_02_0072__p2176191716284">Integer</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.3 "><p id="waf_02_0072__p61761317172814">Specifies the number of invalid requests detected within the time range.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="waf_02_0072__row131761817162814"><td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.1 "><p id="waf_02_0072__p717621718284">lfi</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.2 "><p id="waf_02_0072__p3176517152811">Integer</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.3 "><p id="waf_02_0072__p360919231290">Specifies the number of local file inclusion attacks detected within the time range.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="waf_02_0072__row11761175286"><td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.1 "><p id="waf_02_0072__p1117611702813">robot</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.2 "><p id="waf_02_0072__p1717612178285">Integer</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.3 "><p id="waf_02_0072__p917614179281">Specifies the number of malicious crawlers detected within the time range.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="waf_02_0072__row181761817112811"><td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.1 "><p id="waf_02_0072__p2176131782811">antitamper</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.2 "><p id="waf_02_0072__p1176101719285">Integer</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.3 "><p id="waf_02_0072__p51760179282">Specifies the number of webpage tampering attacks detected within the time range.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="waf_02_0072__row15176517162810"><td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.1 "><p id="waf_02_0072__p21762176285">rfi</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.2 "><p id="waf_02_0072__p71761317102818">Integer</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.3 "><p id="waf_02_0072__p1117610171281">Specifies the number of remote file inclusion attacks detected within the time range.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="waf_02_0072__row817681710285"><td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.1 "><p id="waf_02_0072__p0176101792815">vuln</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.2 "><p id="waf_02_0072__p15176161711283">Integer</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.3 "><p id="waf_02_0072__p13176317192819">Specifies the number of other attacks detected within the time range.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="waf_02_0072__row10176717192811"><td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.1 "><p id="waf_02_0072__p017691711283">whiteblackip</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.2 "><p id="waf_02_0072__p9176151742810">Integer</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.3 "><p id="waf_02_0072__p20176121742811">Specifies the number of Blacklist and Whitelist events detected within the time range.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="waf_02_0072__row1617641711288"><td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.1 "><p id="waf_02_0072__p91760174285">webshell</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.2 "><p id="waf_02_0072__p617621720286">Integer</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="33.333333333333336%" headers="mcps1.3.4.3.2.4.1.3 "><p id="waf_02_0072__p10176201712811">Specifies the number of webshell attacks detected within the time range.</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
<div class="section" id="waf_02_0072__section195321810191219"><h4 class="sectiontitle">Example</h4><p id="waf_02_0072__p3289219184316"></p>
|
|
<div class="p" id="waf_02_0072__p20825715101219">Response example<pre class="screen" id="waf_02_0072__screen654551021214">{
|
|
"xss": 150,
|
|
"sqli": 321,
|
|
"cmdi": 120,
|
|
"robot": 10,
|
|
"whiteblackip": 30,
|
|
"custom": 50,
|
|
"cc": 60,
|
|
"illegal": 10
|
|
}
|
|
</pre>
|
|
</div>
|
|
</div>
|
|
<div class="section" id="waf_02_0072__section59485971"><h4 class="sectiontitle">Status Code</h4><div class="p" id="waf_02_0072__waf_02_0012_a652d4922b7df48fca0a65bc1a38ea5f2"><a href="#waf_02_0072__waf_02_0012_t82c3440f3efb42a38b9d4dc4011a33d0">Table 3</a> describes the normal status code returned by the API.
|
|
<div class="tablenoborder"><a name="waf_02_0072__waf_02_0012_t82c3440f3efb42a38b9d4dc4011a33d0"></a><a name="waf_02_0012_t82c3440f3efb42a38b9d4dc4011a33d0"></a><table cellpadding="4" cellspacing="0" summary="" id="waf_02_0072__waf_02_0012_t82c3440f3efb42a38b9d4dc4011a33d0" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Status code</caption><thead align="left"><tr id="waf_02_0072__waf_02_0012_r3d6e2f205c444705bdbb9daaac74e575"><th align="left" class="cellrowborder" valign="top" width="22%" id="mcps1.3.6.2.2.2.4.1.1"><p id="waf_02_0072__waf_02_0012_af3c4073076f24eca88d94e3fa1effdc6">Status Code</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="19.41%" id="mcps1.3.6.2.2.2.4.1.2"><p id="waf_02_0072__waf_02_0012_en-us_topic_0144911667_p4531342288">Description</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="58.589999999999996%" id="mcps1.3.6.2.2.2.4.1.3"><p id="waf_02_0072__waf_02_0012_ada185614bba24140995b8123b3e9faa8">Meaning</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="waf_02_0072__waf_02_0012_rc7b2adc390904a1ba79e303017797786"><td class="cellrowborder" valign="top" width="22%" headers="mcps1.3.6.2.2.2.4.1.1 "><p id="waf_02_0072__waf_02_0012_a93f3895d44bb4226934cc626ac50e37b">200</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="19.41%" headers="mcps1.3.6.2.2.2.4.1.2 "><p id="waf_02_0072__waf_02_0012_en-us_topic_0144911667_p7538425819">OK</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="58.589999999999996%" headers="mcps1.3.6.2.2.2.4.1.3 "><p id="waf_02_0072__waf_02_0012_en-us_topic_0144911667_p369874114414">The request has succeeded.</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
<p id="waf_02_0072__waf_02_0012_en-us_topic_0144911667_p482819399522">For details about error status codes, see <a href="waf_02_0085.html">Status Codes</a>.</p>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="waf_02_0069.html">Event Logs</a></div>
|
|
</div>
|
|
</div>
|
|
|