{"type":"api","title":"Get Post Aggregation Data By Query 28","meta":{"id":"/apps/pubhub/media/sd-wan-api-20-16/58fb893fa751949ea20a40274e9ab219a20e19fa/e77267b5-7b4b-3f93-807c-c6d1c6b41343","info":{"title":"Cisco Catalyst SD-WAN Manager API","description":"The vManage API exposes the functionality of operations maintaining devices and the overlay network","contact":{"email":"vmanage@cisco.com"},"license":{"name":"Commercial License","url":"https://www.cisco.com/c/en/us/solutions/enterprise-networks/sd-wan/index.html"},"version":"2.0.0"},"openapi":"3.0.1","servers":[{"url":"/dataservice"}]},"spec":{"tags":["Monitoring - Umbrella Patterns"],"description":"Get aggregated data based on input query and filters. The data can be filtered on time and other unique parameters based upon necessity and intended usage","operationId":"getPostAggregationDataByQuery_28","requestBody":{"description":"Stats query string","content":{"application/json":{"schema":{"type":"object"},"examples":{"generated by base class - Monitoring - Events":{"description":"generated by base class - Monitoring - Events","value":{"query":{"condition":"AND","rules":[{"value":["24"],"field":"entry_time","type":"date","operator":"last_n_hours"},{"field":"system_ip","operator":"in","type":"string","value":["172.16.254.2"]}]},"aggregation":{"field":[{"property":"severity_level","order":"asc","sequence":1}],"histogram":{"property":"entry_time","interval":1,"type":"hour","order":"asc"}}},"$$ref":"#/components/examples/Events"},"generated by base class - Monitoring - Interface Statistics":{"description":"generated by base class - Monitoring - Interface Statistics","value":{"query":{"condition":"AND","rules":[{"value":["24"],"field":"entry_time","type":"date","operator":"last_n_hours"},{"value":["172.16.254.1"],"field":"vdevice_name","type":"string","operator":"in"},{"value":["ge0/1","system","vmanage_system","eth0","loopback65528","ge0/0"],"field":"interface","type":"string","operator":"in"}]},"sort":[{"field":"entry_time","type":"date","order":"asc"}],"aggregation":{"field":[{"property":"interface","sequence":1}],"histogram":{"property":"entry_time","type":"minute","interval":30,"order":"asc"},"metrics":[{"property":"rx_kbps","type":"avg"},{"property":"tx_kbps","type":"avg"}]}},"$$ref":"#/components/examples/InterfaceStatistics"},"generated by base class - Monitoring - QoS":{"description":"generated by base class - Monitoring - QoS","value":{"query":{"condition":"AND","rules":[{"value":["24"],"field":"entry_time","type":"date","operator":"last_n_hours"},{"value":["172.16.254.1"],"field":"vdevice_name","type":"string","operator":"in"},{"value":["ge0/0"],"field":"interface","type":"string","operator":"in"}]},"aggregation":{"field":[{"property":"queue_name","sequence":1,"size":20}],"histogram":{"property":"entry_time","type":"minute","interval":30,"order":"asc"},"metrics":[{"property":"tx_bytes_in_kbps","type":"avg","order":"desc"},{"property":"drop_in_kbps","type":"avg"}]},"sort":[{"field":"entry_time","type":"date","order":"asc"}]},"$$ref":"#/components/examples/QoS"},"generated by base class - Monitoring - Umbrella":{"description":"generated by base class - Monitoring - Umbrella","value":{"query":{"condition":"AND","rules":[{"value":["24"],"field":"entry_time","type":"date","operator":"last_n_hours"},{"value":["172.16.254.3"],"field":"vdevice_name","type":"string","operator":"in"},{"value":["umbrella"],"field":"type","type":"string","operator":"in"}]},"aggregation":{"histogram":{"property":"entry_time","type":"minute","interval":30,"order":"asc"},"metrics":[{"property":"local_domain_bypass_total_pkts","type":"sum"}]}},"$$ref":"#/components/examples/Umbrella"},"generated by base class - Monitoring - URL Filtering":{"description":"generated by base class - Monitoring - URL Filtering","value":{"query":{"condition":"AND","rules":[{"value":["24"],"field":"entry_time","type":"date","operator":"last_n_hours"},{"value":["172.16.254.2"],"field":"vdevice_name","type":"string","operator":"in"},{"value":["urlf"],"field":"type","type":"string","operator":"in"}]},"aggregation":{"metrics":[{"property":"reputation_block","type":"sum"},{"property":"blacklist_hit_cnt","type":"sum"}]}},"$$ref":"#/components/examples/URLFiltering"},"generated by base class - Monitoring - IPsAlert":{"description":"generated by base class - Monitoring - IPsAlert","value":{"query":{"condition":"AND","rules":[{"value":["24"],"field":"entry_time","type":"date","operator":"last_n_hours"},{"value":["172.16.254.2"],"field":"vdevice_name","type":"string","operator":"in"},{"value":["ips_alert"],"field":"type","type":"string","operator":"in"}]},"aggregation":{"histogram":{"property":"entry_time","type":"minute","interval":30,"order":"asc"},"field":[{"property":"severity","size":10,"sequence":1}]}},"$$ref":"#/components/examples/IPsAlert"},"generated by base class - Monitoring - Umbrella Patterns":{"description":"generated by base class - Monitoring - Umbrella Patterns","value":{"query":{"condition":"AND","rules":[{"value":["12"],"field":"entry_time","type":"date","operator":"last_n_hours"},{"value":["zonepair"],"field":"type","type":"string","operator":"in"},{"value":["172.16.254.2"],"field":"vdevice_name","type":"string","operator":"in"}]},"aggregation":{"metrics":[{"property":"zp_aggr_byte_counts","type":"sum","order":"desc"}]}},"$$ref":"#/components/examples/UmbrellaPatterns"}}}}},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"object"},"examples":{"generated by base class - Monitoring - Events":{"description":"generated by base class - Monitoring - Events","value":{"data":[{"entry_time":1639893600000,"count":2,"severity_level":"minor"},{"entry_time":1639897200000,"count":2,"severity_level":"minor"},{"entry_time":1639900800000,"count":2,"severity_level":"minor"},{"entry_time":1639904400000,"count":2,"severity_level":"minor"},{"entry_time":1639908000000,"count":2,"severity_level":"minor"}],"factoryDefault":false},"$$ref":"#/components/examples/Events-2"},"generated by base class - Monitoring - Interface Statistics":{"description":"generated by base class - Monitoring - Interface Statistics","value":{"data":[{"entry_time":1639546200000,"count":3,"interface":"eth0","tx_kbps":0,"rx_kbps":0},{"entry_time":1639546200000,"count":3,"interface":"ge0/0","tx_kbps":0,"rx_kbps":0},{"entry_time":1639546200000,"count":3,"interface":"ge0/1","tx_kbps":18,"rx_kbps":20},{"entry_time":1639546200000,"count":3,"interface":"loopback65528","tx_kbps":0,"rx_kbps":0},{"entry_time":1639546200000,"count":3,"interface":"system","tx_kbps":0,"rx_kbps":0}]},"$$ref":"#/components/examples/InterfaceStatistics-2"},"generated by base class - Monitoring - QoS":{"description":"generated by base class - Monitoring - QoS","value":{"data":[{"entry_time":1639551600000,"count":6,"queue_name":"Aggregate","drop_in_kbps":0,"tx_bytes_in_kbps":0},{"entry_time":1639551600000,"count":6,"queue_name":"Queue0","drop_in_kbps":0,"tx_bytes_in_kbps":0},{"entry_time":1639551600000,"count":6,"queue_name":"Queue1","drop_in_kbps":0,"tx_bytes_in_kbps":0},{"entry_time":1639551600000,"count":6,"queue_name":"Queue2","drop_in_kbps":0,"tx_bytes_in_kbps":0},{"entry_time":1639551600000,"count":6,"queue_name":"Queue3","drop_in_kbps":0,"tx_bytes_in_kbps":0}]},"$$ref":"#/components/examples/QoS-2"},"generated by base class - Monitoring - Umbrella":{"description":"generated by base class - Monitoring - Umbrella","value":{"data":[{"entry_time":1639897200000,"count":0,"local_domain_bypass_total_pkts":0},{"entry_time":1639899000000,"count":0,"local_domain_bypass_total_pkts":0},{"entry_time":1639900800000,"count":0,"local_domain_bypass_total_pkts":0},{"entry_time":1639902600000,"count":0,"local_domain_bypass_total_pkts":0},{"entry_time":1639904400000,"count":0,"local_domain_bypass_total_pkts":0}]},"$$ref":"#/components/examples/Umbrella-2"},"generated by base class - Monitoring - URL Filtering":{"description":"generated by base class - Monitoring - URL Filtering","value":{"data":[{"blacklist_hit_cnt":0,"reputation_block":0}]},"$$ref":"#/components/examples/URLFiltering-2"},"generated by base class - Monitoring - IPsAlert":{"description":"generated by base class - Monitoring - IPsAlert","value":{"data":[]},"$$ref":"#/components/examples/IPsAlert-2"},"generated by base class - Monitoring - Umbrella Patterns":{"description":"generated by base class - Monitoring - Umbrella Patterns","value":{"data":[{"zp_aggr_byte_counts":0}]},"$$ref":"#/components/examples/UmbrellaPatterns-2"}}}}},"400":{"description":"Bad Request"},"403":{"description":"Forbidden"},"500":{"description":"Internal Server Error"}},"x-roles-required":"default,dca","__originalOperationId":"getPostAggregationDataByQuery_28","method":"post","path":"/statistics/fwall/aggregation"}}