Get number of assets for all categories : pass start time as a query parameter
To list all NDR appliance categories, send the following request:
GET https://<IA_IP_address>/config/v1/cad?stime&etimeRequired header:
--user <username>:<password>IA_IP_address—IP address of the NDR appliance running the NDR API.
username— Administrator username.
password—Administrator password.
Example
GET https://xxx.xxx.xxx.xxx/config/v1/cad?stime&etimeRequired header:
--user <username>:<password>Response
HTTP/1.1 [Response Code] [Response Message]
Date: [Date]
Content-Type: [Content Type]
Category: "Database", "others", "Printer"
Count: 1,2
Response fields
Response Code—A standard HTTP response code.
Response Message—A standard HTTP response message.
Date—Standard HTML date format.
Content Type—The response format.
Category—The category of the appliance.
Count—The number of appliance.
Example
curl localhost:8085/config/v1/cad?stime=1700747822&etime=1716482820
[
{
"category": "Database",
"count": 1
},
{
"category": "Other",
"count": 2
},
{
"category": "Printer",
"count": 1
}
]cURL code sample
curl -k --user npadmin:hammerhead https://xxx.xxx.xxx.xxx/config/v1/cad?stime&etime -X GETThis cURL sample includes the following options:
-k—This option explicitly allows cURL to perform insecure SSL connections and transfers, which allows you to test your SSL connection without installing a CA certificate.--user npadmin:hammerhead—Replacenpadminwith your user name. Replacehammerheadwith your password.https://xxx.xxx.xxx.xxx/config/v1/cad?stime—The users request URL. Replacexxx.xxx.xxx.xxxwith the IP address of your NDR appliance.-X GET—This option specifies using the GET method.
Results
This example returns a list of all NDR appliance categories. The output is in JSON format.
To list all NDR appliance categories, send the following request:
GET https://<IA_IP_address>/config/v1/cad/category?stime=1701770377&etime=1716482820&category=OtherRequired header:
--user <username>:<password>IA_IP_address—IP address of the NDR appliance running the NDR API.
username— Administrator username.
password—Administrator password.
Example
GET https://xxx.xxx.xxx.xxx/config/v1/cad/category?stime=1701770377&etime=1716482820&category=OtherRequired header:
--user <username>:<password>Response
HTTP/1.1 [Response Code] [Response Message]
Date: [Date]
Content-Type: [Content Type]
Category: "Database", "others", "Printer"
Count: 1,2 Response fields
Response Code—A standard HTTP response code.
Response Message—A standard HTTP response message.
Date—Standard HTML date format.
Content Type—The response format.
Category—The category of the appliance.
Count—The number of appliance.
Example
curl localhost:8085/config/v1/cad/category?stime=1701770377&etime=1716482820&category=Other
[
{
"asset-ip": "255.255.255.255",
"hostname": "",
"os": "",
"mac": "",
"category": "Other",
"status": "PotentialCritical",
"src-ports": [],
"dest-ports": [
"67"
],
"protocols": [
"UDP"
],
"services": [
"bootps"
],
"clients": [
"0.0.0.0",
"10.128.39.98"
],
"targets": [],
"event-types": [
"flow",
"pxflow"
],
"user-agents": [],
"firstseen": "1700727336",
"lastseen": "1701770857",
"flows-in": 2192,
"flows-out": 0,
"bytes-in": 5546,
"bytes-out": 13833000,
"events-in": 0,
"events-out": 0
}
][
{
"category": "Database",
"count": 1
},
{
"category": "Other",
"count": 2
},
{
"category": "Printer",
"count": 1
}
]cURL code sample
curl -k --user npadmin:hammerhead https://xxx.xxx.xxx.xxx/config/v1/cad/category?stime=1701770377&etime=1716482820&category=Other -X GETThis cURL sample includes the following options:
-k—This option explicitly allows cURL to perform insecure SSL connections and transfers, which allows you to test your SSL connection without installing a CA certificate.--user npadmin:hammerhead—Replacenpadminwith your user name. Replacehammerheadwith your password.https://xxx.xxx.xxx.xxx/config/v1/cad?stime—The users request URL. Replacexxx.xxx.xxx.xxxwith the IP address of your NDR appliance.-X GET—This option specifies using the GET method.
Results
This example returns a list of all NDR appliance categories. The output is in JSON format.
To list all NDR appliance categories, send the following request:
GET https://<IA_IP_address>/config/v1/cad/category?stime=17017703&etime=1716482820&category=Database,Other"Required header:
--user <username>:<password>IA_IP_address—IP address of the NDR appliance running the NDR API.
username— Administrator username.
password—Administrator password.
Example
GET https://xxx.xxx.xxx.xxx/config/v1/cad/category?stime=17017703&etime=1716482820&category=Database,Other"Required header:
--user <username>:<password>Response
HTTP/1.1 [Response Code] [Response Message]
Date: [Date]
Content-Type: [Content Type] Category: "Database", "others", "Printer"
Count: 1,2 Response fields
Response Code—A standard HTTP response code.
Response Message—A standard HTTP response message.
Date—Standard HTML date format.
Content Type—The response format.
Category—The category of the appliance.
Count—The number of appliance.
Example
curl "localhost:8085/config/v1/cad/category?stime=17017703&etime=1716482820&category=Database,Other"
[
{
"asset-ip": "10.128.15.13",
"hostname": "fenet1.eng.fireeye.com1",
"os": "",
"mac": "",
"category": "Database",
"status": "",
"src-ports": [],
"dest-ports": [
"53"
],
"protocols": [
"UDP"
],
"services": [
"dns"
],
"clients": [
"10.128.36.145",
"10.128.36.62",
"10.128.36.238",
"10.128.37.140",
"10.128.37.112",
"10.128.37.244",
"10.128.36.84"
],
"targets": [],
"event-types": [
"dns"
],
"user-agents": [],
"firstseen": "1700727180",
"lastseen": "1700749211",
"flows-in": 0,
"flows-out": 0,
"bytes-in": 0,
"bytes-out": 0,
"events-in": 11322,
"events-out": 0
},
{
"asset-ip": "255.255.255.255",
"hostname": "",
"os": "",
"mac": "",
"category": "Other",
"status": "PotentialCritical",
"src-ports": [],
"dest-ports": [
"67"
],
"protocols": [
"UDP"
],
"services": [
"bootps"
],
"clients": [
"0.0.0.0",
"10.128.39.98"
],
"targets": [],
"event-types": [
"flow",
"pxflow"
],
"user-agents": [],
"firstseen": "1700727336",
"lastseen": "1701771336",
"flows-in": 2193,
"flows-out": 0,
"bytes-in": 5546,
"bytes-out": 13839360,
"events-in": 0,
"events-out": 0
}cURL code sample
curl -k --user npadmin:hammerhead https://xxx.xxx.xxx.xxx/config/v1/category?stime=1701770377&etime=1716482820&category=Other -X GETThis cURL sample includes the following options:
-k—This option explicitly allows cURL to perform insecure SSL connections and transfers, which allows you to test your SSL connection without installing a CA certificate.--user npadmin:hammerhead—Replacenpadminwith your user name. Replacehammerheadwith your password.https://xxx.xxx.xxx.xxx/config/v1/cad?stime—The users request URL. Replacexxx.xxx.xxx.xxxwith the IP address of your NDR appliance.-X GET—This option specifies using the GET method.
Results
This example returns all NDR appliance categories. The output is in JSON format.