{"type":"api","title":"Get Post Aggregation Data By Query Monitoring Security Unified Logging Connection Events 3904","meta":{"id":"/apps/pubhub/media/cisco-catalyst-sd-wan-api-guide-20-18/1c4807bcb76af36988ebb37dc2e455b1787a155e/d2f02ba2-fd0d-3a26-bcc5-feafc8f24d17","info":{"title":"Monitoring and Troubleshooting","description":"Includes API operations for the following:\n- Real-time monitoring\n- Accessing statistics APIs and statistics bulk APIs\n- Retrieving device state\n- Managing alarms and events\n","contact":{"email":"vmanage@cisco.com"},"version":"20.18 - 2025-08-15"},"openapi":"3.1.0","servers":[{"url":"/dataservice"}]},"spec":{"tags":["Monitoring - Security Unified Logging Connection Events"],"description":"Get aggregated data based on input query and filters. The data can be filtered on time and other unique parameters based upon necessity and intended usage","operationId":"getPostAggregationDataByQuery_MonitoringSecurityUnifiedLoggingConnectionEvents_3904","requestBody":{"description":"Stats query string","content":{"application/json":{"schema":{"type":"object"},"examples":{"Stats query string":{"description":"Stats query string","value":{"query":{"condition":"AND","rules":[{"value":["24"],"field":"entry_time","type":"date","operator":"last_n_hours"},{"value":["172.16.255.15"],"field":"vdevice_name","type":"string","operator":"in"}]}}}}}},"required":true},"responses":{"200":{"description":"Success","content":{"application/json":{"schema":{"type":"object"},"examples":{"Aggregated search result":{"description":"Aggregated search result","value":{"data":[{"ip_proto":6,"device_model":"vedge-CSR-1000v","egress_intf":"cpu","packets":5,"src_ip":"10.20.24.1","statcycletime":1616170802027,"octets":300,"sdvt_drop_reason_name":"Service Node not healthy","tenant":"default","dest_port":80,"entry_time":1616170026992,"create_time":1616170001492,"end_time":1616170016505,"fw_action":"Pass","vmanage_system_ip":"172.16.255.15","fw_policy":"p1","src_port":53105,"start_time":1616170001492,"application":"unknown","fw_protocol":"http","ingress_intf":"GigabitEthernet5","fw_class":"1","vdevice_name":"172.16.255.15","dest_ip":"90.130.70.73","vip_idx":1,"family":"network-service","host_name":"vm5","vpn_id":1,"id":"uNlJS3gBQcANHsKKW_5s"}],"pageInfo":{"startTime":"1615956601540","endTime":"1616170802027","scrollId":"DXF1ZXJ5QW5kRmV0Y2gBAAAAAAAAQXMWSm81WWtQX1NUeXU4UnpKYm9VV2Nudw==_500","hasMoreData":false,"count":14,"totalCount":14}}}}}}},"400":{"description":"Bad Request"},"403":{"description":"Forbidden"},"500":{"description":"Internal Server Error"}},"x-roles-required":"Device Monitoring-read,dca","method":"post","path":"/statistics/sul/connections/aggregation"}}