{"type":"api","title":"ips alert devices list","meta":{"id":"/apps/pubhub/media/cisco-catalyst-sd-wan-api-guide-20-18/1c4807bcb76af36988ebb37dc2e455b1787a155e/d2f02ba2-fd0d-3a26-bcc5-feafc8f24d17","info":{"title":"Monitoring and Troubleshooting","description":"Includes API operations for the following:\n- Real-time monitoring\n- Accessing statistics APIs and statistics bulk APIs\n- Retrieving device state\n- Managing alarms and events\n","contact":{"email":"vmanage@cisco.com"},"version":"20.18 - 2025-08-15"},"openapi":"3.1.0","servers":[{"url":"/dataservice"}]},"spec":{"tags":["Monitoring - Security Policy"],"summary":"ips alert devices list","description":"Get ips alert devices list ","operationId":"getPostIPSAlertByQuery","requestBody":{"description":"Stats query string","content":{"application/json":{"schema":{"type":"object"},"examples":{"ips alert device query":{"description":"ips alert device query","value":{"aggregation":{"field":[{"property":"host_name","sequence":1},{"property":"siteid","sequence":2},{"property":"src_ip","sequence":3},{"property":"dst_ip","sequence":4}],"metrics":[{"property":"entry_time","type":"top_hits","size":1}]},"query":{"condition":"AND","rules":[{"value":["24"],"field":"entry_time","type":"date","operator":"last_n_hours"},{"value":["OS-OTHER Bash CGI environment variable injection attempt"],"field":"message","type":"string","operator":"equal"},{"value":["Critical"],"field":"severity","type":"string","operator":"equal"},{"value":["ips_alert"],"field":"type","type":"string","operator":"in"}]}},"$$ref":"#/components/examples/ComViptelaVmanageServerDeviceSecuritySecurityapiParameterExampleIpsalertdevice"}}}},"required":true},"responses":{"200":{"description":"search results matching criteria","content":{"application/json":{"schema":{"type":"array","items":{"required":["entry_time"],"type":"object","properties":{"device_ip":{"type":"string","example":"1.1.1.1"},"entry_time":{"type":"integer","format":"int64","example":1639897200000},"host_name":{"type":"string","example":"vm1"},"site_name":{"type":"string","example":"sjc"}},"$$ref":"#/components/schemas/DeviceLists"}}}}},"400":{"description":"bad input parameter"}},"x-roles-required":"Security-read,Device Monitoring-read","method":"post","path":"/security/policy/ips/device"}}