Get number of assets for all categories

Prev Next

Get number of assets for all categories : pass start time as a query parameter

To list all NDR appliance categories, send the following request:

GET https://<IA_IP_address>/config/v1/cad?stime&etime

Required header:

--user <username>:<password>
  • IA_IP_address—IP address of the NDR appliance running the NDR API.

  • username— Administrator username.

  • password—Administrator password.

Example

GET https://xxx.xxx.xxx.xxx/config/v1/cad?stime&etime

Required header:

--user <username>:<password>

Response

HTTP/1.1 [Response Code] [Response Message]
Date: [Date]
Content-Type: [Content Type] 
Category: "Database", "others", "Printer"
Count: 1,2

Response fields

  • Response Code—A standard HTTP response code.

  • Response Message—A standard HTTP response message.

  • Date—Standard HTML date format.

  • Content Type—The response format.

  • Category—The category of the appliance.

  • Count—The number of appliance.

Example
curl localhost:8085/config/v1/cad?stime=1700747822&etime=1716482820
[
{
"category": "Database",
"count": 1
},
{
"category": "Other",
"count": 2
},
{
"category": "Printer",
"count": 1
}
]

cURL code sample

curl -k --user npadmin:hammerhead https://xxx.xxx.xxx.xxx/config/v1/cad?stime&etime -X GET

This cURL sample includes the following options:

  • -k—This option explicitly allows cURL to perform insecure SSL connections and transfers, which allows you to test your SSL connection without installing a CA certificate.

  • --user npadmin:hammerhead—Replace npadmin with your user name. Replace hammerhead with your password.

  • https://xxx.xxx.xxx.xxx/config/v1/cad?stime—The users request URL. Replace xxx.xxx.xxx.xxx with the IP address of your NDR appliance.

  • -X GET—This option specifies using the GET method.

Results

This example returns a list of all NDR appliance categories. The output is in JSON format.

To list all NDR appliance categories, send the following request:

GET https://<IA_IP_address>/config/v1/cad/category?stime=1701770377&etime=1716482820&category=Other

Required header:

--user <username>:<password>
  • IA_IP_address—IP address of the NDR appliance running the NDR API.

  • username— Administrator username.

  • password—Administrator password.

Example

GET https://xxx.xxx.xxx.xxx/config/v1/cad/category?stime=1701770377&etime=1716482820&category=Other

Required header:

--user <username>:<password>

Response

HTTP/1.1 [Response Code] [Response Message]
Date: [Date]
Content-Type: [Content Type] 
Category: "Database", "others", "Printer"
Count: 1,2 

Response fields

  • Response Code—A standard HTTP response code.

  • Response Message—A standard HTTP response message.

  • Date—Standard HTML date format.

  • Content Type—The response format.

  • Category—The category of the appliance.

  • Count—The number of appliance.

Example
curl localhost:8085/config/v1/cad/category?stime=1701770377&etime=1716482820&category=Other
[
{
"asset-ip": "255.255.255.255",
"hostname": "",
"os": "",
"mac": "",
"category": "Other",
"status": "PotentialCritical",
"src-ports": [],
"dest-ports": [
"67"
],
"protocols": [
"UDP"
],
"services": [
"bootps"
],
"clients": [
"0.0.0.0",
"10.128.39.98"
],
"targets": [],
"event-types": [
"flow",
"pxflow"
],
"user-agents": [],
"firstseen": "1700727336",
"lastseen": "1701770857",
"flows-in": 2192,
"flows-out": 0,
"bytes-in": 5546,
"bytes-out": 13833000,
"events-in": 0,
"events-out": 0
}
][
{
"category": "Database",
"count": 1
},
{
"category": "Other",
"count": 2
},
{
"category": "Printer",
"count": 1
}
]

cURL code sample

curl -k --user npadmin:hammerhead https://xxx.xxx.xxx.xxx/config/v1/cad/category?stime=1701770377&etime=1716482820&category=Other -X GET

This cURL sample includes the following options:

  • -k—This option explicitly allows cURL to perform insecure SSL connections and transfers, which allows you to test your SSL connection without installing a CA certificate.

  • --user npadmin:hammerhead—Replace npadmin with your user name. Replace hammerhead with your password.

  • https://xxx.xxx.xxx.xxx/config/v1/cad?stime—The users request URL. Replace xxx.xxx.xxx.xxx with the IP address of your NDR appliance.

  • -X GET—This option specifies using the GET method.

Results

This example returns a list of all NDR appliance categories. The output is in JSON format.

To list all NDR appliance categories, send the following request:

GET https://<IA_IP_address>/config/v1/cad/category?stime=17017703&etime=1716482820&category=Database,Other"

Required header:

--user <username>:<password>
  • IA_IP_address—IP address of the NDR appliance running the NDR API.

  • username— Administrator username.

  • password—Administrator password.

Example

GET https://xxx.xxx.xxx.xxx/config/v1/cad/category?stime=17017703&etime=1716482820&category=Database,Other"

Required header:

--user <username>:<password>

Response

HTTP/1.1 [Response Code] [Response Message]
Date: [Date]
Content-Type: [Content Type] Category: "Database", "others", "Printer"
Count: 1,2 

Response fields

  • Response Code—A standard HTTP response code.

  • Response Message—A standard HTTP response message.

  • Date—Standard HTML date format.

  • Content Type—The response format.

  • Category—The category of the appliance.

  • Count—The number of appliance.

Example
curl "localhost:8085/config/v1/cad/category?stime=17017703&etime=1716482820&category=Database,Other"
[
{
"asset-ip": "10.128.15.13",
"hostname": "fenet1.eng.fireeye.com1",
"os": "",
"mac": "",
"category": "Database",
"status": "",
"src-ports": [],
"dest-ports": [
"53"
],
"protocols": [
"UDP"
],
"services": [
"dns"
],
"clients": [
"10.128.36.145",
"10.128.36.62",
"10.128.36.238",
"10.128.37.140",
"10.128.37.112",
"10.128.37.244",
"10.128.36.84"
],
"targets": [],
"event-types": [
"dns"
],
"user-agents": [],
"firstseen": "1700727180",
"lastseen": "1700749211",
"flows-in": 0,
"flows-out": 0,
"bytes-in": 0,
"bytes-out": 0,
"events-in": 11322,
"events-out": 0
},
{
"asset-ip": "255.255.255.255",
"hostname": "",
"os": "",
"mac": "",
"category": "Other",
"status": "PotentialCritical",
"src-ports": [],
"dest-ports": [
"67"
],
"protocols": [
"UDP"
],
"services": [
"bootps"
],
"clients": [
"0.0.0.0",
"10.128.39.98"
],
"targets": [],
"event-types": [
"flow",
"pxflow"
],
"user-agents": [],
"firstseen": "1700727336",
"lastseen": "1701771336",
"flows-in": 2193,
"flows-out": 0,
"bytes-in": 5546,
"bytes-out": 13839360,
"events-in": 0,
"events-out": 0
}

cURL code sample

curl -k --user npadmin:hammerhead https://xxx.xxx.xxx.xxx/config/v1/category?stime=1701770377&etime=1716482820&category=Other -X GET

This cURL sample includes the following options:

  • -k—This option explicitly allows cURL to perform insecure SSL connections and transfers, which allows you to test your SSL connection without installing a CA certificate.

  • --user npadmin:hammerhead—Replace npadmin with your user name. Replace hammerhead with your password.

  • https://xxx.xxx.xxx.xxx/config/v1/cad?stime—The users request URL. Replace xxx.xxx.xxx.xxx with the IP address of your NDR appliance.

  • -X GET—This option specifies using the GET method.

Results

This example returns all NDR appliance categories. The output is in JSON format.