Analytics and Dashboards
28 min
Ribbon Summary Counts
POST /api/v1/analytics/summary
REQUEST
{
"current_time": 1580515200,
"start_time": 1580515200,
"time_duration_type": "day",
"timezone_offset": 330,
"gateway_type": "pcs",
"overlay_filter_type": "non_compliance_users",
"global_filter": {
"gateway_ids": [
"74h4h3-u43943-4u3o4",
"84h4h3-u43943-4u3o5"
]
}
}
RESPONSE
[
{
"status": 73,
"name": "device",
"description": "Active devices vs. Connected devices",
"actual_value": 16,
"total_value": 25,
"line_graph_data": [
1,
2,
3
],
"line_graph_color": "green",
"trend_direction": "up",
"trend_delta": 5
}
]Gateway Map View
POST /api/v1/analytics/pcs_location_view
REQUEST
{
"current_time": 1580515200,
"start_time": 1580515200,
"time_duration_type": "day",
"timezone_offset": 330,
"gateway_type": "pcs",
"overlay_filter_type": "non_compliance_users",
"global_filter": {
"gateway_ids": [
"74h4h3-u43943-4u3o4",
"84h4h3-u43943-4u3o5"
]
}
}
RESPONSE
{
"bubble_items": [
{
"granularity": "city",
"city": "Austin",
"country": "USA",
"continent": "North America",
"id": "new_york",
"bubble_color": "Green",
"latitude": 48.5,
"longitude": 71.923,
"num_gws_good": 1,
"num_gws_warning": 1,
"num_gws_critical": 1,
"num_gws_offline": 1,
"total_gateways": 10,
"active_users": {
"count": 76,
"color": "Green",
"num_nonCompliance_users": 1
},
"active_devices": {
"count": 76,
"color": "Green"
},
"active_sessions": {
"count": 76,
"color": "Green"
},
"non_compliance_count": {
"count": 76,
"color": "Green"
},
"user_location_bubble_items": [
{
"id": "san_jose",
"city": "Bengaluru",
"latitude": 48.5,
"longitude": 71.923,
"num_active_users": 200
}
]
}
],
"count": 10
}Gateway User-specific Map View
POST /api/v1/analytics/pcs_users_location_view
REQUEST
{
"current_time": 1580515200,
"start_time": 1580515200,
"time_duration_type": "day",
"timezone_offset": 330,
"gateway_type": "pcs",
"overlay_filter_type": "non_compliance_users",
"global_filter": {
"gateway_ids": [
"74h4h3-u43943-4u3o4",
"84h4h3-u43943-4u3o5"
]
}
}
RESPONSE
{
"bubble_items": [
{
"granularity": "city",
"city": "Bengaluru",
"country": "India",
"continent": "North America",
"bubble_color": "Green",
"latitude": 48.5,
"longitude": 71.923,
"avg_risk_score": {
"count": 76,
"color": "Green"
},
"num_active_users": 10,
"num_high_risk_users": 1,
"num_moderate_risk_users": 1,
"num_low_risk_users": 1,
"num_no_risk_users": 1
}
],
"count": 10
}Plotting Sankey Chart
POST /api/v1/analytics/pcs_l1_sankey_chart
REQUEST
{
"current_time": 1580515200,
"start_time": 1580515200,
"time_duration_type": "day",
"timezone_offset": 330,
"gateway_type": "pcs",
"overlay_filter_type": "non_compliance_users",
"global_filter": {
"gateway_ids": [
"74h4h3-u43943-4u3o4",
"84h4h3-u43943-4u3o5"
]
}
}
RESPONSE
{
"user_groups_to_device_types": [
[
{
"source": "Bangalore",
"target": "Windows",
"value": 10
}
]
],
"device_types_to_gateway_names": [
[
{
"source": "Bangalore",
"target": "Windows",
"value": 10
}
]
],
"gateway_names_to_application_names": [
[
{
"source": "Bangalore",
"target": "Windows",
"value": 10
}
]
]
}Top Active Gateways
POST /api/v1/analytics/widgets/top_gateways
REQUEST
{
"time_duration_type":"active",
"gateway_type":"pcs",
"current_time":"1649153664"
}
RESPONSE
[
{
"name":"pcs-bng","value":28
}
]Top Device Types
POST /api/v1/analytics/widgets/top_device_types
REQUEST
{
"time_duration_type":"active",
"gateway_type":"pcs",
"current_time":"1649153664"
}
RESPONSE
{
"title": "TOP DEVICE TYPES",
"device_types": [
{
"name": "bucket1",
"value": 314
}
]
}Top User Locations
POST /api/v1/analytics/widgets/top_user_access_locations
REQUEST
{
"time_duration_type":"active",
"gateway_type":"pcs",
"current_time":"1649153664"
}
RESPONSE
{
"title": "TOP USER ACCESS LOCATIONS",
"user_access_locations": [
{
"name": "bucket1",
"value": 314
}
]
}Active Session Duration
POST /api/v1/analytics/widgets/top_session_durations
REQUEST
{
"time_duration_type":"active",
"gateway_type":"pcs",
"current_time":"1649153664"
}
RESPONSE
{
"buckets": [
{
"name": "35 Min(s) - 2 Hour(s)",
"session_end_time": 1649156400,
"session_start_time": 1649152800,
"value": 28
}
],
"chart_timestamp": 1649158524,
"title": "Session Times"
}Connected Clients Active Users
POST /api/v1/analytics/devices/connected_clients
REQUEST
{
"gateway_type": "pcs",
"current_time": 1649158826,
"time_duration_type": "active",
"timezone_offset": 0,
"users": "active"
}
RESPONSE
{
"connected_devices": [
{
"type": "Android 7.0",
"values": [
{
"count": 2,
"name": "9.1.7.4075 Mozilla"
}
]
},
{
"type": "Ubuntu",
"values": [
{
"count": 2,
"name": "9.1.11.5655 Mozilla"
}
]
},
{
"type": "Windows 7",
"values": [
{
"count": 2,
"name": "9.1.12.5655 Mozilla"
}
]
},
{
"type": "iOS 12.0",
"values": [
{
"count": 3,
"name": "9.1.10.5655 Mozilla"
}
]
},
{
"type": "Android 8.0.0",
"values": [
{
"count": 1,
"name": "9.1.9.4075 Mozilla"
}
]
},
{
"type": "Windows",
"values": [
{
"count": 2,
"name": "9.1.8.4075 Mozilla"
}
]
}
]
}Connected Clients All Users
POST /api/v1/analytics/devices/connected_clients
REQUEST
{
"gateway_type": "pcs",
"current_time": 1649158826,
"time_duration_type": "active",
"timezone_offset": 0,
"users": "all"
}
RESPONSE
{
"connected_devices": [
{
"type": "Android 7.0",
"values": [
{
"count": 2,
"name": "9.1.7.4075 Mozilla"
}
]
},
{
"type": "U
]buntu",
"values": [
{
"count": 2,
"name": "9.1.11.5655 Mozilla"
}
},
{
"type": "Windows 7",
"values": [
{
"count": 2,
"name": "9.1.12.5655 Mozilla"
}
]
},
{
"type": "iOS 12.0",
"values": [
{
"count": 3,
"name": "9.1.10.5655 Mozilla"
}
]
},
{
"type": "Android 8.0.0",
"values": [
{
"count": 1,
"name": "9.1.9.4075 Mozilla"
}
]
},
{
"type": "Windows",
"values": [
{
"count": 2,
"name": "9.1.8.4075 Mozilla"
}
]
}
]
}Top Non Compliances
POST /api/v1/analytics/users/top_non_compliance_by_policy
REQUEST
{
"time_duration_type":"active",
"gateway_type":"pcs",
"current_time":"1649153664"
}
RESPONSE
{
"chart_timestamp": 1649159279,
"non_compliance_policies": [
{
"name": "HCPolicy3_OSCheck",
"values": [
{
"name": "HcResultFullNonCompliance",
"value": 1
},
{
"name": "HcResultPartialCompliance",
"value": 1
}
]
},
{
"name": "HCPolicy4_File&Process",
"values": [
{
"name": "HcResultFullNonCompliance",
"value": 1
},
{
"name": "HcResultPartialCompliance",
"value": 1
}
]
},
{
"name": "HCPolicy1_Antivirus",
"values": [
{
"name": "HcResultFullNonCompliance",
"value": 1
}
]
},
{
"name": "HCPolicy2_Firewall",
"values": [
{
"name": "HcResultFullNonCompliance",
"value": 1
}
]
},
{
"name": "HCPolicy5_Pred&Custom",
"values": [
{
"name": "HcResultFullNonCompliance",
"value": 1
}
]
}
],
"title": "Non-Compliance"
}Pre-Auth Non Compliances
POST /api/v1/analytics/users/pcs_pre_auth_nc?count=5
REQUEST
{
"time_duration_type":"active",
"gateway_type":"pcs",
"current_time":"1649153664",, 'category': 'device_os_type'
}
RESPONSE
{
"chart_timestamp": 1649159279,
"title": "Non-Compliance",
"top_pre_auth_nc_items_by_category": []
}Gateway Info Panel
POST /api/v1/analytics/widgets/top_gateways/panel
REQUEST
{
"time_duration_type":"active",
"gateway_type":"pcs",
"sort_order":"desc",
"sort_field":"active_users_count",
"current_time":"1649153664"
}
RESPONSE
{
"info_panel_items": [
{
"id": "feicie-cneineoic-nfeie-32he",
"gateway_name": "eng-mkn-gw-1",
"city_name": "bangalore",
"overall_color": "green",
"gateway_status": "active",
"number_of_issues": 10,
"cpu_line_graph_data": "string",
"memory_line_graph_data": "string",
"disk_used_line_graph_data": "string",
"active_users_count": 10,
"active_devices_count": 10,
"active_sessions_count": 10,
"active_applications_count": 10,
"non_compliance_count": 10,
"issues_highest_severity": "CRITICAL",
"issues_details": [
{
"message_id": "NTP12456",
"raw_message": "NTP server is not reachable",
"issue_timestamp": 3848462926,
"number_of_issues": 23
}
],
"system_uptime": 10748,
"last_config_update_timestamp": 1063264,
"ssl_sessions_count": 10,
"auth_only_sessions_count": 10,
"active_sync_device_count": 10,
"is_node_part_of_cluster": true,
"cluster_properties": {
"cluster_id": "9ccf22b9fe9ccf22b9fe",
"cluster_name": "CoaGroup",
"cluster_type": "Active/Active",
"cluster_node_type": "active",
"cluster_member_type": "leader",
"is_vip_owner": false,
"is_node_reachable": true,
"is_node_enabled": false
}
}
],
"count": 10,
"all_gateway_count": 10,
"active_gateway_count": 5,
"offline_gateway_count": 5,
"online_gateway_count": 5,
"unregistered_gateway_count": 5
}Active Users Info Panel
POST /api/v1/analytics/widgets/pcs_top_users/panel
REQUEST
{
"time_duration_type":"active",
"gateway_type":"pcs",
"name":"top_gateways",
"sort_order":"desc",
"sort_field":"timestamp",
"current_time":"1649153664"
}
RESPONSE
{
"info_panel_items": [
{
"connection_types": [
"JSAM",
"VPN"
],
"user_name": "user1",
"timestamp": 1580515200,
"device_location_city": "Bengaluru",
"network_access_layer": "L3",
"gateway_name": "t-0-gw-1",
"compliance_status": "Non-Compliant",
"device_type": "macOS"
}
],
"count": 10,
"total": 20
}Devices Info Panel
POST /api/v1/analytics/widgets/pcs_top_device_types/panel
REQUEST
{
"time_duration_type":"active",
"gateway_type":"pcs",
"sort_order":"desc",
"sort_field":"device_type",
"current_time":"1649153664"
}
RESPONSE
{
"info_panel_items": [
{
"device_type": "Mac",
"device_count": 335,
"l3_session_count": 120,
"l7_session_count": 120,
"device_count_by_location": [
{
"name": "Bangalore",
"value": 500
},
{
"name": "London",
"value": 200
}
],
"non_compliance_count": 25
}
],
"total": 20
}Active Sessions Info Panel
POST /api/v1/analytics/widgets/pcs_top_sessions/panel
REQUEST
{
"time_duration_type":"active",
"gateway_type":"pcs",
"sort_order":"desc",
"sort_field":"user_name",
"current_time":"1649153664"
}
RESPONSE
{
"info_panel_items": [
{
"alerts_count": 10,
"anomalies_count": 5,
"connection_types": [
"JSAM",
"VPN"
],
"device_location_city": "Bengaluru",
"device_types": [
"Windows",
"Ubuntu"
],
"gateway_name": "t-0-gw-1",
"session_types": [
"L3",
"L7"
],
"session_ids": [
"9ccf22b9fe",
"61cedb7c80"
],
"timestamp": 1580515200,
"user_name": "user1",
"user_risk_score": 10
}
],
"count": 10,
"total": 20
}Active Applications Info Panel
POST /api/v1/analytics/widgets/pcs_top_applications/panel
REQUEST
{
"time_duration_type":"active",
"gateway_type":"pcs",
"sort_order":"desc",
"sort_field":"timestamp",
"current_time":"1649153664"
}
RESPONSE
{
"info_panel_items": [
{
"application_bookmark_type": "User defined",
"application_connection_broker": "WIN73428.auto.pcs.com:443",
"application_desktop_protocol": "rdp",
"application_host": "<IPv6 Address>",
"application_ip": "<IP Address>",
"timestamp": 1580515200,
"application_name": "MyGmailCom",
"application_port": "1494",
"application_type": "Web",
"application_url": "www.gmail.com",
"devices_count": 5,
"sessions_count": 5,
"users_count": "5"
}
],
"count": 5,
"total": 20
}Non Compliances Info Panel
POST /api/v1/analytics/widgets/pcs_non_compliance/panel
REQUEST
{
"time_duration_type":"active",
"gateway_type":"pcs",
"sort_order":"desc",
"sort_field":"user_name",
"current_time":"1649153664"
}
RESPONSE
{
"info_panel_items": [
{
"user_name": "user1",
"user_roles": [
"Role1",
"Role2"
],
"timestamp": 1580515200,
"compliance_status": "Non-Compliant",
"non_compliance_policies": [
{
"policy_name": "engg_policy",
"failure_reason": "Anti-Virus turned off"
}
],
"user_location": "Bangalore",
"session_id": "d3534dse",
"device_type": "Windows",
"gateway_name": "gw-east-london"
}
],
"count": 5,
"total": 20
}Auth Failure Info Panel
POST /api/v1/analytics/widgets/pcs_top_auth_failures/panel
REQUEST
{
"time_duration_type":"active",
"gateway_type":"pcs",
"sort_order":"desc",
"sort_field":"user_name",
"current_time":"1649153664"
}
RESPONSE
{
"info_panel_items": [
{
"user_name": "user1",
"timestamp": 1580515200,
"device_location_city": "Bengaluru",
"auth_server_name": "Server 1",
"auth_server_position": "Primary",
"device_type": "macOS",
"gateway_name": "t-0-gw-1",
"auth_failure_reason": "Login Failed. Incorrect token."
}
],
"count": 10,
"total": 20
}Anomalies Info Panel
POST /api/v1/analytics/widgets/anomalies/panel
REQUEST
{
"time_duration_type":"active",
"gateway_type":"pcs",
"sort_order":"desc",
"sort_field":"user_name",
"current_time":"1649153664"
}
RESPONSE
{
"info_panel_items": [
{
"anomaly_type": "GeoNewLocation",
"user_name": "John Smith",
"timestamp": 1587972453,
"device_id": "27178d97948d46c09c205d30e9cf2afe",
"session_id": "9ccf22b9fe",
"device_type": "Windows",
"anomaly_reason": "Non-familiar user location.",
"anomaly_id": "e4abbb38ce8d4619891e561cedb7c807",
"acknowledged": true,
"active_session": true,
"browser": "Google Chrome",
"locations_history": [
{
"location_name": "Bangalore",
"timestamp": 1580515200
}
],
"current_location": "Bangalore"
},
{},
{
"anomaly_type": "GeoNewLocation",
"user_name": "John Smith",
"timestamp": 1587972453,
"device_id": "27178d97948d46c09c205d30e9cf2afe",
"session_id": "9ccf22b9fe",
"device_type": "Windows",
"anomaly_reason": "Non-familiar user location.",
"anomaly_id": "e4abbb38ce8d4619891e561cedb7c807",
"acknowledged": true,
"active_session": true,
"browser": "Google Chrome",
"application_names": [
"Microsoft",
"Facebook"
],
"details": "Normal access hours range of user is between 9 a.m. to 5 p.m."
}
],
"count": 20,
"total": 20
}Summary Strip with Gateway Filter
POST /api/v1/analytics/summary
REQUEST
{
"current_time": 1580515200,
"start_time": 1580515200,
"gateway_type": "pcs",
"overlay_filter_type": "non_compliance_users",
"global_filter": {
"gateway_ids": [
"74h4h3-u43943-4u3o4"
]
}
}
RESPONSE
[
{
"status": 73,
"name": "device",
"description": "Active devices vs. Connected devices",
"actual_value": 16,
"total_value": 25,
"line_graph_data": [
1,
2,
3
],
"line_graph_color": "green",
"trend_direction": "up",
"trend_delta": 5
}
]Search Logs
POST /api/analytics/logs/search
REQUEST
{
"name": "Filter1",
"start_time_es": 1576533928,
"end_time_es": 1576533928,
"current_time": 1576533928,
"timezone_offset": 330,
"offset": 0,
"limit": 100,
"search_string": "PCS",
"search_string_columns": [
"application_configured_name"
],
"sort_by": "timestamp",
"sort_group_by": "application_name",
"group_by": "application_name",
"order": "desc",
"log_type": "access",
"gateway_type": "pcs",
"columns": [
"timestamp",
"message_id",
"severity",
"session_id",
"raw_message"
],
"group_by_columns": [
"unique_gateway_names_count",
"unique_user_names_count",
"unique_application_names_count",
"summary_device_types",
"summary_message_types",
"unique_device_ids_count",
"unique_session_ids_count"
],
"filters": [
{
"filter_by": "message_ids",
"operator": "IS",
"value": "PCSGateway"
}
]
}
RESPONSE
{
"total": 1000,
"count": 10,
"offset": 0,
"log_lines": [
{
"timestamp": 1576533928,
"message_id": "ADM24682",
"gateway_id": "123e4567-e89b-12d3-a456-426655440000",
"gateway_name": "Azure-Gateway_1",
"severity": "INFO",
"source_ip": "<IP Address>",
"raw_message": "Primary authentication successful for admindb/SDP Admin Auth from\n172.21.8.171\n",
"user_name": "testuser1",
"user_group": "testgroup1",
"session_id": "fa0726e89c",
"device_id": "965C34BA98C94F4EAE6F2D8564E6CEAC",
"application_name": "Jira.abc.com",
"application_group_names": [
[
"group-1",
"group-2"
]
],
"application_protocol": "HTTPS",
"application_protocol_display_name": "Web",
"application_discovered": false,
"application_type": "url",
"application_status": "Green",
"application_connection_broker": "auto.pcs.com",
"application_desktop_protocol": "ssh",
"application_host": "auto.pcs.com",
"application_ip": "1.2.3.4",
"application_url": "www.gmail.com",
"application_location_city": "Bengaluru",
"application_bookmark_type": "Admin defined",
"non_compliance_policy_name": "Jira_access_policy",
"non_compliance_policy_types_list": [
[
"Location",
"HC"
]
],
"message_type": "Anomaly",
"sub_message_type": "Anomaly",
"pulse_client_version": "2021.12.1",
"device_type": "Windows",
"device_os_type": "Windows 10 Pro",
"device_location_city": "mumbai",
"user_risk_score": 10.23,
"user_risk_score_category": "High",
"user_alerts_count": 13,
"user_anomalies_count": 10,
"user_activity_deviations_count": 5,
"acknowledged": true,
"session_type": "local",
"adaptive_auth_reason": "new_location",
"controller": true,
"is_session_active": true,
"session_duration": "2:20:00",
"bandwidth_consumed": 1024,
"bandwidth_consumed_str": "1.00 Kb",
"connected_time": "2:10:30",
"role_names": [
[
"role-1",
"role-2"
]
],
"session_created_timestamp": 1576533928,
"browser": "Google Chrome",
"gateway_status": "online",
"gateway_version": "21.x Build 1",
"esap_version": "21.x Build 1",
"cpu": 26.75,
"physical_memory": 18.25,
"swap_memory": 20.9,
"disk_used_percentage": 34.5,
"throughput_value": 67,
"avg_cpu": 26.75,
"avg_memory": 18.25,
"avg_disk": 34.5,
"avg_throughput": 67,
"max_concurrent_user_licenses_consumed": 200
}
]
}Top Busy Users
Post
/api/v1/analytics/users/top_busy_users
Response
{
"current_time":1668488805,
"time_duration_type":"active",
"timezone_offset":0
}
Request
{
"blocks": [ ],
"chart_timestamp": 1668488805,
"max_apps_list": [ ],
"max_gradient_value": 10,
"max_users_list": [ ],
"min_gradient_value": 0,
"title": "Top Busy Users"
}Applications by Type
Post
/api/v1/analytics/applications/applications_by_type
Request
{
"current_time":1668489311,
"time_duration_type":"active",
"timezone_offset":0
}
Response
{
"chart_timestamp": 1668489311,
"data": [],
"title": "Applications Type"
}Top Gateways by Health
Post
api/v1/analytics/gateways/top_gateways_by_health
Request
{
"gateway_type":"zta",
"current_time":1668496306,
"time_duration_type":"active","
"timezone_offset":0,
"category":"cpu"
}
Response
{
"chart_timestamp": 1668496306,
"data": [
{
"name": "esxi-21-12r1-95",
"value": 1.98
},
{
"name": "esxi-22-1r1-75",
"value": 2.0
}
],
"title": "ZTA L2 Gateways By Health Chart",
"total_items": 2
}Policy Failures Trend
Post
/api/v1/analytics/policy_failures/policy_failures_trend
Request
{
"current_time":1668499346,
"time_duration_type":"active",
"timezone_offset":0
}
Response
{
"bar_chart_data": {
"data": [
{
"timestamp": "07:00 AM",
"value": 0
},
{
"timestamp": "07:05 AM",
"value": 0
},
{
"timestamp": "07:10 AM",
"value": 0
},
{
"timestamp": "07:15 AM",
"value": 0
},
{
"timestamp": "07:20 AM",
"value": 0
},
{
"timestamp": "07:25 AM",
"value": 0
},
{
"timestamp": "07:30 AM",
"value": 0
},
{
"timestamp": "07:35 AM",
"value": 0
},
{
"timestamp": "07:40 AM",
"value": 0
},
{
"timestamp": "07:45 AM",
"value": 0
},
{
"timestamp": "07:50 AM",
"value": 0
},
{
"timestamp": "07:55 AM",
"value": 0
},
{
"timestamp": "08:00 AM",
"value": 0
}
],
"name": "Unique users"
},
"chart_timestamp": 1668499346,
"lines_chart_data": [],
"timestamps_list": [
"07:00 AM",
"07:05 AM",
"07:10 AM",
"07:15 AM",
"07:20 AM",
"07:25 AM",
"07:30 AM",
"07:35 AM",
"07:40 AM",
"07:45 AM",
"07:50 AM",
"07:55 AM",
"08:00 AM"
],
"title": "Policy Failures Access Trend",
"top_failure_types_list": [],
"unique_applications": {
"data": [
{
"timestamp": "07:00 AM",
"value": 0
},
{
"timestamp": "07:05 AM",
"value": 0
},
{
"timestamp": "07:10 AM",
"value": 0
},
{
"timestamp": "07:15 AM",
"value": 0
},
{
"timestamp": "07:20 AM",
"value": 0
},
{
"timestamp": "07:25 AM",
"value": 0
},
{
"timestamp": "07:30 AM",
"value": 0
},
{
"timestamp": "07:35 AM",
"value": 0
},
{
"timestamp": "07:40 AM",
"value": 0
},
{
"timestamp": "07:45 AM",
"value": 0
},
{
"timestamp": "07:50 AM",
"value": 0
},
{
"timestamp": "07:55 AM",
"value": 0
},
{
"timestamp": "08:00 AM",
"value": 0
}
],
"name": "Unique applications"
},
"unique_users": {
"data": [
{
"timestamp": "07:00 AM",
"value": 0
},
{
"timestamp": "07:05 AM",
"value": 0
},
{
"timestamp": "07:10 AM",
"value": 0
},
{
"timestamp": "07:15 AM",
"value": 0
},
{
"timestamp": "07:20 AM",
"value": 0
},
{
"timestamp": "07:25 AM",
"value": 0
},
{
"timestamp": "07:30 AM",
"value": 0
},
{
"timestamp": "07:35 AM",
"value": 0
},
{
"timestamp": "07:40 AM",
"value": 0
},
{
"timestamp": "07:45 AM",
"value": 0
},
{
"timestamp": "07:50 AM",
"value": 0
},
{
"timestamp": "07:55 AM",
"value": 0
},
{
"timestamp": "08:00 AM",
"value": 0
}
],
"name": "Unique users"
}
}Audit Logs
Post
/api/v1/analytics/actionable_insights_actions/audit_logs
Request
{
"start_time_es":1668413629,
"end_time_es":1668500029,
"current_time":1668500029,
"time_duration_type":"day",
"timezone_off
set":0,"offset":0,"limit":50,
"category":"user_risk_score",
"gateway_type":"zta"
}
Response
{
"count": 0,
"log_lines": [],
"total": 0
}Report Templates
Get
/api/v1/analytics/reports_new/templates
Response
"templates": [
{
"created": "1970-01-01T00:00:00Z",
"description": "Custom report provides a way to add additional information and it can be saved as a report template.",
"gateway_type": "zta",
"is_base_template": true,
"name": "Custom Report",
"read_only": true,
"template_id": "e1e898b3201f4d18b24251f8294ee314",
"updated": "1970-01-01T00:00:00Z"
},
{
"created": "1970-01-01T00:00:00Z",
"description": "User access information summarizing the activity of individual users or user groups.",
"gateway_type": "zta",
"is_base_template": false,
"name": "User Activity Summary Report",
"read_only": true,
"template_id": "250801c6f8e7423f995d320c0e211602",
"updated": "1970-01-01T00:00:00Z"
},
{
"created": "1970-01-01T00:00:00Z",
"description": "Application activity information summarizing how applications are accessed and used.",
"gateway_type": "zta",
"is_base_template": false,
"name": "Application Access Report",
"read_only": true,
"template_id": "07bdc031cf784d7b9f6af4aa90ed4428",
"updated": "1970-01-01T00:00:00Z"
},
{
"created": "2022-07-25T04:59:20Z",
"description": "",
"gateway_type": "zta",
"is_base_template": false,
"name": "template1",
"read_only": false,
"template_id": "cd8ae185d52647eb9a8a89a1e1cf1dd5",
"updated": "2022-07-25T04:59:20Z"
},
{
"created": "1970-01-01T00:00:00Z",
"description": "Metrics and indicators of UEBA threat level associated with users.",
"gateway_type": "zta",
"is_base_template": false,
"name": "User UEBA threat Report",
"read_only": true,
"template_id": "9d2a883a76194068a20149ee3b90f3bc",
"updated": "1970-01-01T00:00:00Z"
}
]
}