{"type":"api","title":"Get Activities (All)","meta":{"id":"/apps/pubhub/media/Meraki-Dashboard-API-v1-Documentation/426c8f7edc2cc0036fbe8fd4ce0d3ec2eda7fa14/de857a95-32cb-3f3c-8d64-0bf8514993f9","info":{"title":"Meraki Integrated API for Secure Connect","description":"The Cisco Meraki Integrated API for Secure Connect is a modern REST API based on the OpenAPI specification.\n ---\n\n [API Documentation](https://meraki.io/api)\n\n [Meraki Homepage](https://www.meraki.com)\n","version":"1.8.0","contact":{"name":"Meraki Developer Community","url":"https://meraki.io/community"}},"security":[{"meraki_api_key":[]},{"bearerAuth":[]}],"tags":[{"name":"Reports"},{"name":"Activity"},{"name":"Top Categories"},{"name":"Organization Requests by Timerange and Category"},{"name":"Total Requests"},{"name":"Summary"},{"name":"Applications"},{"name":"Deployments"},{"name":"Data Center"},{"name":"Network Devices"},{"name":"Organization Tunnel"},{"name":"Policy"},{"name":"Firewall Applications"},{"name":"Policies"},{"name":"Destination Lists"},{"name":"Destinations"}],"x-parser-conf":{"theme":"meraki","expand":2,"exampleAsDefault":true,"groupBy":{"$remoteModule":"config/group_api_tag.js"}},"openapi":"3.0.0","servers":[{"url":"https://api.meraki.com/{basePath}","variables":{"basePath":{"default":"api/secureConnect/v1"}}}],"securitySchemes":{"meraki_api_key":{"type":"apiKey","name":"X-Cisco-Meraki-API-Key","in":"header"},"bearerAuth":{"type":"apiKey","name":"Authorization","in":"header"}}},"spec":{"tags":["Reports","Activity"],"summary":"Get Activities (All)","description":"List all activities (dns/proxy/firewall/intrusion) within the timeframe.\n**Note:** The IP activity report is not available.","operationId":"getActivities","security":[{"meraki_api_key":[]}],"parameters":[{"name":"organizationId","in":"path","description":"Organization ID associated with this resource.","required":true,"schema":{"type":"integer"}},{"name":"from","in":"query","description":"A timestamp or relative time string (for example: '-1days').\nFilter for data that appears after this time.","required":true,"schema":{"type":"string"},"example":"1639146300000"},{"name":"to","in":"query","description":"A timestamp or relative time string (for example: 'now').\nFilter for data that appears before this time.","required":true,"schema":{"type":"string"},"example":"1640010300000"},{"name":"offset","in":"query","description":"A number that represents an index in the collection.","schema":{"type":"number","default":0},"example":0},{"name":"limit","in":"query","description":"The maximum number of records to return from the collection.","required":true,"schema":{"type":"number","default":100},"example":100},{"name":"domains","in":"query","description":"A domain name or comma-delimited list of domain name.","schema":{"type":"string"},"example":"cisco.com,nasa.gov"},{"name":"urls","in":"query","description":"A URL or comma-delimited list of URL.","schema":{"type":"string"},"example":"https://google.com,facebook.com/help"},{"name":"categories","in":"query","description":"A category ID or comma-delimited list of category ID.","schema":{"type":"string"},"example":"148,151,66"},{"name":"policycategories","in":"query","description":"A category ID or comma-delimited list of category ID.\nFilter the request by the categories that trigger a policy.","schema":{"type":"string"},"example":"67,69"},{"name":"ip","in":"query","description":"An IP address","schema":{"type":"string"},"example":"10.10.10.10"},{"name":"ports","in":"query","description":"A port number or comma-delimited list of port number.","schema":{"type":"string"},"example":"7351,80"},{"name":"identityids","in":"query","description":"An identity ID or comma-delimited list of identity ID.","schema":{"type":"string"},"example":"1,2,3"},{"name":"identitytypes","in":"query","description":"An identity type or comma-delimited list of identity type.","schema":{"type":"string"},"example":"network,roaming"},{"name":"applicationid","in":"query","description":"An application ID.","schema":{"type":"string"},"example":"1"},{"name":"verdict","in":"query","description":"A verdict string or comma-delimited list of verdict string.","schema":{"type":"string"},"example":"allowed,blocked,proxied"},{"name":"ruleid","in":"query","description":"A firewall policy rule ID.","schema":{"type":"number"},"example":1},{"name":"filename","in":"query","description":"A string that identifies a filename. Filter the request by the filename.\nSupports globbing or use of the wildcard character ('*'). The asterisk (*) matches\nzero or more occurrences of any character.","schema":{"type":"string"},"example":"myfilename_*"},{"name":"securityoverridden","in":"query","description":"Specify whether to filter on requests that override security.","schema":{"type":"boolean"},"example":true},{"name":"bundleid","in":"query","description":"A proxy bundle ID.","schema":{"type":"number"},"example":1},{"name":"threats","in":"query","description":"A threat name or comma-delimited list of threat name.","schema":{"type":"string"}},{"name":"threattypes","in":"query","description":"A threat type or comma-delimited list of threat type.","schema":{"type":"string"}},{"name":"ampdisposition","in":"query","description":"An AMP disposition string or a comma-delimited list of AMP disposition string.","schema":{"type":"string"},"example":"clean,malicious,unknown"},{"name":"antivirusthreats","in":"query","description":"A threat name or comma-delimited list of threat name.","schema":{"type":"string"},"example":"Trojan.Linux.Generic.144075"},{"name":"x-traffic-type","in":"header","description":"A string or comma-delimited list of string that describes the type of traffic. Valid values are:\ndns, proxy, firewall, or ip. If the header is not set, the default value is 'all'.","schema":{"type":"string"},"example":"dns,proxy,firewall,ip"},{"name":"isolatedstate","in":"query","description":"A string that describes the remote browser isolation\n(RBI) isolation type (for example: 'isolated' or 'not-isolated').","schema":{"type":"string","enum":["isolated","not-isolated"]},"example":"isolated"},{"name":"isolatedFileAction","in":"query","description":"A string that describes the remote browser isolation (RBI) file action type\n(for example: 'viewed', 'downloaded-original-file', or 'downloaded-safe-pdf').","schema":{"type":"string","enum":["viewed","downloaded-original-file","downloaded-safe-pdf"]},"example":"downloaded-safe-pdf"},{"name":"datalosspreventionstate","in":"query","description":"A string that describes the status of a destination (for example: 'blocked').\nFilter data for requests that were blocked to protect data.","schema":{"type":"string"},"example":"blocked"},{"name":"filternoisydomains","in":"query","description":"filter out domains that generate a lot of insignificant traffic (noise).","schema":{"type":"boolean"},"example":true},{"name":"httperrors","in":"query","description":"Filter data for requests that resulted in a TLS error or a certificate error.\nValid values: `certificateerror` or `tlserror`.","schema":{"type":"string","enum":["certificateerror","tlserror"]},"example":"certificateerror"},{"name":"exists","in":"query","description":"Specify a comma-separated list of attributes to filter the data. Valid values are: categories, policycategories, applicationid,\nnbarapplicationid, nbarapplicationtypeids, privateapplicationid, applicationgroupids, sha256, filename, threats, threattypes,\nantivirusthreats, destinationlistids, httperrors.","schema":{"type":"string"},"example":"destinationlistids,threattypes"},{"name":"timezone","in":"query","description":"Display the timestamp of the traffic events in the specified timezone.\nFor the timezone, provide a continent and city separated by an url-encoded forward slash ('/'), for example: timezone='ASIA%2fCALCUTTA'.","schema":{"type":"string"},"example":"ASIA%2fCALCUTTA"}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"type":"object","properties":{"data":{"type":"array","items":{"anyOf":[{"type":"object","description":"The information about the DNS activity.","properties":{"externalip":{"type":"string","description":"external IP for entry"},"internalip":{"type":"string","description":"internal IP for entry"},"policycategories":{"type":"array","description":"array of policy categories","items":{"type":"object","description":"The category object","properties":{"id":{"type":"number","description":"The ID of the category"},"label":{"type":"string","description":"the human readable label of the category"},"type":{"type":"string","description":"the type of category"},"integration":{"type":"boolean","description":"if the category is an integration"},"deprecated":{"type":"boolean","description":"if the category is a legacy category"}}}},"categories":{"type":"array","description":"array of categories","items":{"type":"object","description":"The category object","properties":{"id":{"type":"number","description":"The ID of the category"},"label":{"type":"string","description":"the human readable label of the category"},"type":{"type":"string","description":"the type of category"},"integration":{"type":"boolean","description":"if the category is an integration"},"deprecated":{"type":"boolean","description":"if the category is a legacy category"}}}},"verdict":{"type":"string","description":"verdict for entry"},"domain":{"type":"string","description":"domain for entry"},"timestamp":{"type":"number","description":"The timestamp represented in milliseconds","example":1594557263000},"identities":{"type":"array","description":"array of identities for entry","items":{"type":"object","description":"The information about the identity","properties":{"id":{"type":"number","description":"The ID of the identity"},"label":{"type":"string","description":"The label for the identity"},"type":{"type":"object","description":"The information about the identity including the type","properties":{"id":{"type":"number","description":"The ID of the origin type for the identity"},"label":{"type":"string","description":"The label of the origin type for the identity"},"type":{"type":"string","description":"The name of the origin type for the identity"}}},"deleted":{"type":"boolean","description":"Indicates whether the identity was deleted or not"}},"required":["id","label","type","deleted"],"example":{"id":1,"label":"Catch Rate Testing System","type":{"id":21,"label":"Sites","type":"site"},"deleted":false}}},"allapplications":{"type":"array","description":"array of applications for entry","items":{"type":"object","description":"The information about the application","properties":{"id":{"type":"number","description":"id of the application"},"label":{"type":"string","description":"label of the application"},"type":{"type":"string","description":"type of the application, NBAR or AVC"},"category":{"type":"object","description":"the category of the application","properties":{"id":{"type":"number","description":"id of the application category"},"label":{"type":"string","description":"label of the application category"}}}},"example":{"id":1,"label":"malware","type":"avc","category":{"id":2,"label":"Education"}}}},"threats":{"type":"array","items":{"type":"object","description":"The information about the threat","properties":{"label":{"type":"string","description":"the threat name or label"},"type":{"type":"string","description":"the type of threat"}}},"description":"array of threats for entry"},"type":{"type":"string","description":"The type of the request. A DNS request always has the type dns."},"querytype":{"type":"string","description":"The type of DNS request that was made. For more information,\nsee Common DNS Request Types."},"date":{"type":"string","description":"The date from the timestamp based on the timezone parameter","example":"2020-07-12"},"time":{"type":"string","description":"The time in 24 hour format based on the timezone parameter","example":"12:34"},"returncode":{"type":"number","description":"The DNS return code for this request.\nFor more information, see Common DNS return codes for any\nDNS service (and Umbrella)."},"allowedapplications":{"type":"array","items":{"type":"object","description":"The information about the application","properties":{"id":{"type":"number","description":"id of the application"},"label":{"type":"string","description":"label of the application"},"type":{"type":"string","description":"type of the application, NBAR or AVC"},"category":{"type":"object","description":"the category of the application","properties":{"id":{"type":"number","description":"id of the application category"},"label":{"type":"string","description":"label of the application category"}}}},"example":{"id":1,"label":"malware","type":"avc","category":{"id":2,"label":"Education"}}}},"blockedapplications":{"type":"array","items":{"type":"object","description":"The information about the application","properties":{"id":{"type":"number","description":"id of the application"},"label":{"type":"string","description":"label of the application"},"type":{"type":"string","description":"type of the application, NBAR or AVC"},"category":{"type":"object","description":"the category of the application","properties":{"id":{"type":"number","description":"id of the application category"},"label":{"type":"string","description":"label of the application category"}}}},"example":{"id":1,"label":"malware","type":"avc","category":{"id":2,"label":"Education"}}}}},"required":["allapplications","allowedapplications","blockedapplications","categories","date","domain","externalip","identities","internalip","policycategories","querytype","returncode","threats","time","timestamp","type","verdict"],"example":{"externalip":"52.8.160.247","internalip":"52.8.160.247","policycategories":[{"id":66,"label":"Malware","type":"security","integration":true}],"categories":[{"id":66,"label":"Malware","type":"security","integration":true}],"verdict":"allowed","domain":"google.com","timestamp":1548311506,"time":"06:31:46","date":"2019-01-24","identities":[{"id":1,"label":"Catch Rate Testing System","type":{"id":21,"label":"Sites","type":"site"},"deleted":true}],"threats":[{"label":"Wannacry","type":"Ransomware"}],"allapplications":[{"id":1,"label":"label","type":"NBAR","category":{"id":1,"label":"category"}}],"allowedapplications":[{"id":1,"label":"label","type":"NBAR","category":{"id":1,"label":"category"}}],"querytype":"MX","returncode":2,"blockedapplications":[],"type":"dns"}},{"type":"object","description":"The information about the firewall activity.","properties":{"date":{"type":"string","description":"The date from the timestamp based on the timezone parameter","example":"2020-07-12"},"destinationip":{"type":"string","description":"destination IP for entry","example":"12.10.10.10"},"sourceip":{"type":"string","description":"source IP for entry","example":"10.11.10.10"},"sourceport":{"type":"number","description":"source port for entry","example":3000},"destinationport":{"type":"number","description":"destination port for entry","example":89},"verdict":{"type":"string","description":"verdict for entry"},"time":{"type":"string","description":"The time in 24 hour format based on the timezone parameter","example":"12:34"},"timestamp":{"type":"number","description":"The timestamp represented in milliseconds","example":1594557263000},"identities":{"type":"array","description":"array of identities for entry","items":{"type":"object","description":"The information about the identity","properties":{"id":{"type":"number","description":"The ID of the identity"},"label":{"type":"string","description":"The label for the identity"},"type":{"type":"object","description":"The information about the identity including the type","properties":{"id":{"type":"number","description":"The ID of the origin type for the identity"},"label":{"type":"string","description":"The label of the origin type for the identity"},"type":{"type":"string","description":"The name of the origin type for the identity"}}},"deleted":{"type":"boolean","description":"Indicates whether the identity was deleted or not"}},"required":["id","label","type","deleted"],"example":{"id":1,"label":"Catch Rate Testing System","type":{"id":21,"label":"Sites","type":"site"},"deleted":false}}},"protocol":{"type":"object","description":"IP protocol","properties":{"id":{"type":"number","description":"The ID of protocol"},"label":{"type":"string","description":"The name of the protocol"}},"required":["id","label"]},"rule":{"type":"object","description":"The firewall rule","properties":{"id":{"type":"number","description":"The ID of the rule"},"label":{"type":"string","description":"The name of the rule"},"privateapplicationgroup":{"type":"object","description":"The private application group","properties":{"id":{"nullable":true,"type":"number","description":"The ID of application group"},"label":{"nullable":true,"type":"string","description":"The name of the application group"}}}},"required":["id","label"]},"type":{"type":"string","description":"The type of the request. A firewall request always has type firewall."},"allapplications":{"type":"array","description":"A list of firewall applications","items":{"type":"object","description":"The information about the applications managed by the firewall","properties":{"id":{"type":"number","description":"application/protocol id"},"label":{"type":"string","description":"application/protocol label"},"app":{"type":"string","description":"type: \"IT Service Management\" (string) - application/protocol type"}}}},"applicationprotocols":{"type":"array","description":"A list of firewall application protocols.","items":{"type":"object","description":"The information about the applications managed by the firewall","properties":{"id":{"type":"number","description":"application/protocol id"},"label":{"type":"string","description":"application/protocol label"},"app":{"type":"string","description":"type: \"IT Service Management\" (string) - application/protocol type"}}}},"direction":{"type":"string","description":"The direction of the packet. It is destined either towards the internet or to the customer's network."},"packetsize":{"type":"number","description":"The size of the packet that Umbrella CDFW received."}},"required":["allapplications","applicationprotocols","date","destinationip","destinationport","direction","identities","packetsize","protocol","rule","sourceip","sourceport","time","timestamp","type","verdict"],"example":{"date":"","destinationip":"52.8.160.247","sourceip":"192.168.0.1","sourceport":0,"destinationport":0,"direction":"toward","verdict":"allowed","time":"12:34","timestamp":1548311506,"packetsize":32,"identities":[{"id":1,"label":"Catch Rate Testing System","type":{"id":21,"label":"Sites","type":"site"},"deleted":false}],"protocol":{"id":17,"label":"UDP"},"rule":{"id":1,"label":"Default Rule"},"type":"firewall","allapplications":[{"id":72,"label":"dns IT Service Management","app":""}],"applicationprotocols":[{"id":72,"label":"dns IT Service Management","app":""}]}},{"type":"object","description":"The information about the intrusion activity.","properties":{"classification":{"type":"string","description":"The category of attack detected by a rule that is part of a more general type of attack class, such as trojan-activity, attempted-user, and unknown.","example":"trojan-activity"},"date":{"type":"string","description":"The date from the timestamp based on the timezone parameter","example":"2020-07-12"},"destinationip":{"type":"string","description":"destination IP for entry","example":"12.10.10.10"},"destinationport":{"type":"number","description":"destination port for entry","example":89},"identities":{"type":"array","description":"array of identities for entry","items":{"type":"object","description":"The information about the identity","properties":{"id":{"type":"number","description":"The ID of the identity"},"label":{"type":"string","description":"The label for the identity"},"type":{"type":"object","description":"The information about the identity including the type","properties":{"id":{"type":"number","description":"The ID of the origin type for the identity"},"label":{"type":"string","description":"The label of the origin type for the identity"},"type":{"type":"string","description":"The name of the origin type for the identity"}}},"deleted":{"type":"boolean","description":"Indicates whether the identity was deleted or not"}},"required":["id","label","type","deleted"],"example":{"id":1,"label":"Catch Rate Testing System","type":{"id":21,"label":"Sites","type":"site"},"deleted":false}}},"protocol":{"type":"object","description":"IP protocol","properties":{"id":{"type":"number","description":"The ID of protocol"},"label":{"type":"string","description":"The name of the protocol"}},"required":["id","label"]},"sessionid":{"type":"number","description":"The unique identifier of a session, which is used to group the correlated events between various services.","example":7878797},"severity":{"type":"string","description":"The severity level of the rule, such as High, Medium, Low, and Very Low.","example":"High"},"signature":{"type":"object","properties":{"generatorid":{"type":"number","description":"Unique id assigned to the part of the IPS that generated the event."},"id":{"type":"number","description":"Used to uniquely identify signatures."},"label":{"type":"string","description":"A brief description of the signature."},"cves":{"type":"array","items":{"type":"string","description":"An identifier for a known security vulnerability/exposure","example":"cve-2015-0279"}}},"required":["generatorid","id","label","cves"],"example":{"generatorid":148,"id":2,"label":"(cip) CIP data is non-conforming to ODVA standard","cves":["cve-2015-0279"]}},"signaturelist":{"type":"object","description":"A list of signature ID","properties":{"id":{"type":"number","description":"Unique id assigned to a Default or Custom Signature List."}},"required":["id"],"example":{"id":1112}},"sourceip":{"type":"string","description":"source IP for entry","example":"10.11.10.10"},"sourceport":{"type":"number","description":"source port for entry","example":3000},"time":{"type":"string","description":"The time in 24 hour format based on the timezone parameter","example":"12:34"},"timestamp":{"type":"number","description":"The timestamp represented in milliseconds","example":1594557263000},"type":{"type":"string","description":"The type of the request. An intrusion request always has type intrusion."},"verdict":{"type":"string","description":"verdict for entry"}},"required":["classification","date","destinationip","destinationport","identities","protocol","sessionid","severity","signature","signaturelist","sourceip","sourceport","time","timestamp","type","verdict"],"example":{"type":"intrusion","date":"12-02-22","destinationip":"10.10.10.10","protocol":{"id":17,"label":"UDP"},"sourceip":"10.10.10.10","signaturelist":{"id":1111},"classification":"malicious","sourceport":22,"sessionid":190898098,"verdict":"detected","destinationport":33,"timestamp":1594557262000,"time":"09:30","identities":[{"id":211034846,"type":{"id":34,"type":"anyconnect","label":"Anyconnect Roaming Client"},"label":"omerta","deleted":false}],"severity":"HIGH","signature":{"generatorid":1,"id":47829,"label":"SERVER-OTHER JBoss Richfaces expression language injection attempt","cves":["cve-2015-0279","cve-2018-12532"]}}},{"type":"object","description":"The activity of the proxy","properties":{"externalip":{"type":"string","description":"external IP for entry"},"internalip":{"type":"string","description":"internal IP for entry"},"policycategories":{"type":"array","description":"array of policy categories","items":{"type":"object","description":"The category object","properties":{"id":{"type":"number","description":"The ID of the category"},"label":{"type":"string","description":"the human readable label of the category"},"type":{"type":"string","description":"the type of category"},"integration":{"type":"boolean","description":"if the category is an integration"},"deprecated":{"type":"boolean","description":"if the category is a legacy category"}}}},"categories":{"type":"array","description":"array of categories","items":{"type":"object","description":"The category object","properties":{"id":{"type":"number","description":"The ID of the category"},"label":{"type":"string","description":"the human readable label of the category"},"type":{"type":"string","description":"the type of category"},"integration":{"type":"boolean","description":"if the category is an integration"},"deprecated":{"type":"boolean","description":"if the category is a legacy category"}}}},"verdict":{"type":"string","description":"verdict for entry"},"timestamp":{"type":"number","description":"The timestamp represented in milliseconds","example":1594557263000},"identities":{"type":"array","description":"array of identities for entry","items":{"type":"object","description":"The information about the identity","properties":{"id":{"type":"number","description":"The ID of the identity"},"label":{"type":"string","description":"The label for the identity"},"type":{"type":"object","description":"The information about the identity including the type","properties":{"id":{"type":"number","description":"The ID of the origin type for the identity"},"label":{"type":"string","description":"The label of the origin type for the identity"},"type":{"type":"string","description":"The name of the origin type for the identity"}}},"deleted":{"type":"boolean","description":"Indicates whether the identity was deleted or not"}},"required":["id","label","type","deleted"],"example":{"id":1,"label":"Catch Rate Testing System","type":{"id":21,"label":"Sites","type":"site"},"deleted":false}}},"allapplications":{"type":"array","description":"array of applications for entry","items":{"type":"object","description":"The information about the application","properties":{"id":{"type":"number","description":"id of the application"},"label":{"type":"string","description":"label of the application"},"type":{"type":"string","description":"type of the application, NBAR or AVC"},"category":{"type":"object","description":"the category of the application","properties":{"id":{"type":"number","description":"id of the application category"},"label":{"type":"string","description":"label of the application category"}}}},"example":{"id":1,"label":"malware","type":"avc","category":{"id":2,"label":"Education"}}}},"allowedapplications":{"type":"array","description":"array of allowed applications for entry","items":{"type":"object","description":"The information about the application","properties":{"id":{"type":"number","description":"id of the application"},"label":{"type":"string","description":"label of the application"},"type":{"type":"string","description":"type of the application, NBAR or AVC"},"category":{"type":"object","description":"the category of the application","properties":{"id":{"type":"number","description":"id of the application category"},"label":{"type":"string","description":"label of the application category"}}}},"example":{"id":1,"label":"malware","type":"avc","category":{"id":2,"label":"Education"}}}},"blockedapplications":{"type":"array","description":"array of blocked applications for entry","items":{"type":"object","description":"The information about the application","properties":{"id":{"type":"number","description":"id of the application"},"label":{"type":"string","description":"label of the application"},"type":{"type":"string","description":"type of the application, NBAR or AVC"},"category":{"type":"object","description":"the category of the application","properties":{"id":{"type":"number","description":"id of the application category"},"label":{"type":"string","description":"label of the application category"}}}},"example":{"id":1,"label":"malware","type":"avc","category":{"id":2,"label":"Education"}}}},"responsefilename":{"type":"string","description":"response filename for entry"},"blockedfiletype":{"type":"string","description":"blocked file type for entry"},"bundleid":{"type":"number","description":"The ID of the bundle"},"amp":{"type":"object","description":"AMP disposition/score/malware","properties":{"score":{"type":"number","description":"AMP score"},"disposition":{"type":"string","description":"AMP disposition"},"malware":{"type":"string","description":"AMP malware"}},"required":["disposition","malware","score"]},"type":{"type":"string","description":"type of the request. A proxy request is always of type 'proxy'."},"tenantcontrols":{"type":"boolean","description":"if the request was part of a tenant control policy"},"port":{"type":"number","description":"request port","nullable":true},"antivirusthreats":{"type":"object","description":"The information about the antivirus threats","properties":{"puas":{"type":"array","description":"Potentially unwanted applications","items":{"type":"object"}},"viruses":{"type":"array","description":"Viruses","items":{"type":"string"}},"others":{"type":"array","description":"Other antivirus threats","items":{"type":"object"}}},"required":["others","puas","viruses"]},"policy":{"type":"object","required":["destinationlistids","ruleid","rulesetid","timebasedrule"],"properties":{"timebasedrule":{"type":"boolean","description":"whether the policy triggered a time-of-day rule"},"destinationlistids":{"type":"array","description":"the destination lists that the policy triggered","items":{"type":"number"}},"ruleid":{"type":"number","description":"the rule ID for the policy","nullable":true},"rulesetid":{"type":"number","description":"the rule set ID for the policy","nullable":true}}},"requestmethod":{"type":"string","description":"The HTTP request method that was made.","example":"GET"},"responsesize":{"type":"number","description":"Response size in bytes."},"requestsize":{"type":"number","description":"Request size in bytes."},"statuscode":{"type":"number","description":"The HTTP status code; should always be 200 or 201.","example":200},"useragent":{"type":"string","description":"The browser agent that made the request."},"referer":{"type":"string","description":"The referring domain or URL."},"warnstatus":{"type":"string","description":"The warning status."},"sha256":{"type":"string","description":"The hex digest of the response content."},"isolated":{"type":"object","properties":{"state":{"type":"string","description":"The state of the isolated file"},"fileaction":{"type":"string","description":"The action taken for the file"}},"required":["state","fileaction"],"example":{"state":"not-isolated","fileaction":""}},"datalossprevention":{"type":"object","description":"The information about the Data Loss Prevention state","properties":{"state":{"type":"string","description":"If the request was Blocked for DLP. Either 'blocked' or ''"}},"required":["state"],"example":{"state":"blocked"}},"securityoverridden":{"type":"boolean","description":"Specifies whether Umbrella has security overrides."},"contenttype":{"type":"string","description":"The type of web content, typically text/html.","example":"text/html"},"forwardingmethod":{"type":"string","description":"The request method (GET, POST, HEAD, etc.)","example":"GET"},"httperrors":{"type":"array","items":{"type":"object","properties":{"type":{"type":"string","description":"type of the error `CertificateError` or `TLSError`"},"code":{"type":"number","description":"the http error code"},"reason":{"type":"string","description":"the name of the error"},"attributes":{"type":"object","description":"map of additional information about the error"}}},"description":"Certificate & TLS Errors"},"threats":{"type":"array","items":{"type":"object","description":"The information about the threat","properties":{"label":{"type":"string","description":"the threat name or label"},"type":{"type":"string","description":"the type of threat"}}}},"egress":{"type":"object","description":"The information about the egress IP","properties":{"ip":{"type":"string","description":"Egress IP"},"type":{"type":"string","description":"Egress Type"}},"required":["ip","type"],"example":{"ip":"155.190.3.8","type":"shared"}},"datacenter":{"type":"object","description":"The information about the data center","properties":{"id":{"type":"string","description":"Unique ID for the data center"},"label":{"type":"string","description":"Name of the data center"}},"required":["id","label"],"example":{"id":"LAX","label":"Los Angeles, US"}},"date":{"type":"string","description":"The date from the timestamp based on the timezone parameter","example":"2020-07-12"},"time":{"type":"string","description":"The time in 24 hour format based on the timezone parameter","example":"12:34"},"destinationip":{"type":"string","description":"destination IP for entry","example":"12.10.10.10"},"url":{"type":"string","description":"The URL requested"}},"required":["allapplications","allowedapplications","amp","antivirusthreats","blockedapplications","blockedfiletype","bundleid","categories","contenttype","datacenter","datalossprevention","date","destinationip","egress","externalip","forwardingmethod","httperrors","identities","internalip","isolated","policy","policycategories","port","referer","requestsize","responsefilename","responsesize","securityoverridden","sha256","statuscode","tenantcontrols","threats","time","timestamp","type","url","useragent","verdict","warnstatus"],"example":{"destinationip":"","externalip":"32.4.91.7","responsesize":3329530,"allapplications":[{"id":1313,"label":"Netflix","category":{"id":47,"label":"Media"}}],"date":"2022-02-18","datalossprevention":{"state":""},"antivirusthreats":{"puas":[],"viruses":[],"others":[]},"internalip":"192.168.1.43","referer":"","contenttype":"","tenantcontrols":false,"securityoverridden":false,"useragent":"","time":"23:29:42","amp":{"disposition":"","score":0,"malware":""},"policycategories":[],"type":"proxy","requestsize":1996,"port":443,"policy":{"ruleid":0,"rulesetid":0,"destinationlistids":[],"timebasedrule":false},"forwardingmethod":"","categories":[{"id":17,"type":"content","label":"Movies","integration":false,"deprecated":true}],"isolated":{"state":"not-isolated","fileaction":""},"statuscode":200,"egress":{"ip":"155.190.3.8","type":"shared"},"blockedfiletype":"","url":"https://ipv4-lax2-ix.1.oca.anothervideo.net","verdict":"allowed","responsefilename":"","warnstatus":"","sha256":"","timestamp":1645226982000,"blockedapplications":[],"allowedapplications":[],"identities":[{"id":1,"type":{"id":34,"type":"anyconnect","label":"Anyconnect Roaming Client"},"label":"Vincent's Macbook","deleted":false}],"datacenter":{"label":"Atlanta, US","id":"ATL"},"threats":[],"httperrors":[],"bundleid":3}}]}},"meta":{"type":"object","description":"Meta data","example":{}}},"required":["data","meta"]},"example":{"meta":{},"data":[{"externalip":"52.8.160.247","internalip":"52.8.160.247","policycategories":[{"id":66,"label":"Malware","type":"security","integration":true}],"categories":[{"id":66,"label":"Malware","type":"security","integration":true}],"verdict":"allowed","domain":"google.com","timestamp":1548311506,"time":"06:31:46","date":"2019-01-24","identities":[{"id":1,"label":"Catch Rate Testing System","type":{"id":21,"label":"Sites","type":"site"},"deleted":true}],"threats":[{"label":"Wannacry","type":"Ransomware"}],"allapplications":[{"id":1,"label":"label","type":"NBAR","category":{"id":1,"label":"category"}}],"allowedapplications":[{"id":1,"label":"label","type":"NBAR","category":{"id":1,"label":"category"}}],"querytype":"MX","returncode":2,"blockedapplications":[],"type":"dns"}]}}}},"400":{"description":"Bad Request","headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z"}},"content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string","description":"The description of the error.","example":"Internal Server Error"},"code":{"type":"integer","description":"The status code of the error.","example":500}},"example":{"message":"Bad Request","code":400}}}}},"401":{"description":"Unauthorized","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string","description":"The description of the error.","example":"Internal Server Error"},"code":{"type":"integer","description":"The status code of the error.","example":500}},"example":{"message":"Unauthorized","code":401}}}},"headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z"}}},"403":{"description":"Forbidden","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string","description":"The description of the error.","example":"Internal Server Error"},"code":{"type":"integer","description":"The status code of the error.","example":500}},"example":{"message":"Forbidden","code":403}}}},"headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z"}}},"404":{"description":"Not Found","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string","description":"The description of the error.","example":"Internal Server Error"},"code":{"type":"integer","description":"The status code of the error.","example":500}},"example":{"message":"Not Found","code":404}}}},"headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z"}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"type":"object","properties":{"message":{"type":"string","description":"The description of the error.","example":"Internal Server Error"},"code":{"type":"integer","description":"The status code of the error.","example":500}},"example":{"message":"Internal Server Error","code":500}}}},"headers":{"Content-Type":{"schema":{"type":"string"},"description":"The MIME content type of the response body.","example":"application/json"},"Date":{"schema":{"type":"string","pattern":"^[0-90-90-90-9-0-90-9-0-90-9T0-90-9:0-90-9:0-90-9Z]+$"},"description":"The timestamp of the response.","example":"2023-03-14T18:34:25Z"}}}},"__originalOperationId":"getActivities","method":"get","path":"/organizations/{organizationId}/reports/activity"}}