catocli 1.0.14__py3-none-any.whl → 1.0.15__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of catocli might be problematic. Click here for more details.
- catocli/Utils/clidriver.py +5 -1
- catocli/__init__.py +1 -1
- catocli/parsers/mutation_accountManagement/README.md +7 -0
- catocli/parsers/mutation_accountManagement/__init__.py +51 -0
- catocli/parsers/mutation_accountManagement_addAccount/README.md +17 -0
- catocli/parsers/mutation_accountManagement_removeAccount/README.md +16 -0
- catocli/parsers/mutation_accountManagement_updateAccount/README.md +17 -0
- catocli/parsers/mutation_admin_addAdmin/README.md +2 -2
- catocli/parsers/mutation_admin_updateAdmin/README.md +2 -2
- catocli/parsers/mutation_container_delete/README.md +2 -2
- catocli/parsers/mutation_policy_internetFirewall_addRule/README.md +3 -3
- catocli/parsers/mutation_policy_internetFirewall_addSection/README.md +3 -3
- catocli/parsers/mutation_policy_internetFirewall_createPolicyRevision/README.md +3 -3
- catocli/parsers/mutation_policy_internetFirewall_discardPolicyRevision/README.md +3 -3
- catocli/parsers/mutation_policy_internetFirewall_moveRule/README.md +3 -3
- catocli/parsers/mutation_policy_internetFirewall_moveSection/README.md +3 -3
- catocli/parsers/mutation_policy_internetFirewall_publishPolicyRevision/README.md +3 -3
- catocli/parsers/mutation_policy_internetFirewall_removeRule/README.md +3 -3
- catocli/parsers/mutation_policy_internetFirewall_removeSection/README.md +3 -3
- catocli/parsers/mutation_policy_internetFirewall_updatePolicy/README.md +3 -3
- catocli/parsers/mutation_policy_internetFirewall_updateRule/README.md +3 -3
- catocli/parsers/mutation_policy_internetFirewall_updateSection/README.md +3 -3
- catocli/parsers/mutation_policy_wanFirewall_addRule/README.md +3 -3
- catocli/parsers/mutation_policy_wanFirewall_addSection/README.md +3 -3
- catocli/parsers/mutation_policy_wanFirewall_createPolicyRevision/README.md +3 -3
- catocli/parsers/mutation_policy_wanFirewall_discardPolicyRevision/README.md +3 -3
- catocli/parsers/mutation_policy_wanFirewall_moveRule/README.md +3 -3
- catocli/parsers/mutation_policy_wanFirewall_moveSection/README.md +3 -3
- catocli/parsers/mutation_policy_wanFirewall_publishPolicyRevision/README.md +3 -3
- catocli/parsers/mutation_policy_wanFirewall_removeRule/README.md +3 -3
- catocli/parsers/mutation_policy_wanFirewall_removeSection/README.md +3 -3
- catocli/parsers/mutation_policy_wanFirewall_updatePolicy/README.md +3 -3
- catocli/parsers/mutation_policy_wanFirewall_updateRule/README.md +3 -3
- catocli/parsers/mutation_policy_wanFirewall_updateSection/README.md +3 -3
- catocli/parsers/mutation_site_addIpsecIkeV2Site/README.md +2 -2
- catocli/parsers/mutation_site_addIpsecIkeV2SiteTunnels/README.md +2 -2
- catocli/parsers/mutation_site_addNetworkRange/README.md +2 -2
- catocli/parsers/mutation_site_addSocketSite/README.md +2 -2
- catocli/parsers/mutation_site_addStaticHost/README.md +2 -2
- catocli/parsers/mutation_site_removeIpsecIkeV2SiteTunnels/README.md +2 -2
- catocli/parsers/mutation_site_updateHa/README.md +2 -2
- catocli/parsers/mutation_site_updateIpsecIkeV2SiteGeneralDetails/README.md +2 -2
- catocli/parsers/mutation_site_updateIpsecIkeV2SiteTunnels/README.md +2 -2
- catocli/parsers/mutation_site_updateNetworkRange/README.md +2 -2
- catocli/parsers/mutation_site_updateSiteGeneralDetails/README.md +2 -2
- catocli/parsers/mutation_site_updateSocketInterface/README.md +2 -2
- catocli/parsers/mutation_site_updateStaticHost/README.md +2 -2
- catocli/parsers/mutation_sites_addIpsecIkeV2Site/README.md +2 -2
- catocli/parsers/mutation_sites_addIpsecIkeV2SiteTunnels/README.md +2 -2
- catocli/parsers/mutation_sites_addNetworkRange/README.md +2 -2
- catocli/parsers/mutation_sites_addSocketSite/README.md +2 -2
- catocli/parsers/mutation_sites_addStaticHost/README.md +2 -2
- catocli/parsers/mutation_sites_removeIpsecIkeV2SiteTunnels/README.md +2 -2
- catocli/parsers/mutation_sites_updateHa/README.md +2 -2
- catocli/parsers/mutation_sites_updateIpsecIkeV2SiteGeneralDetails/README.md +2 -2
- catocli/parsers/mutation_sites_updateIpsecIkeV2SiteTunnels/README.md +2 -2
- catocli/parsers/mutation_sites_updateNetworkRange/README.md +2 -2
- catocli/parsers/mutation_sites_updateSiteGeneralDetails/README.md +2 -2
- catocli/parsers/mutation_sites_updateSocketInterface/README.md +2 -2
- catocli/parsers/mutation_sites_updateStaticHost/README.md +2 -2
- catocli/parsers/parserApiClient.py +7 -4
- catocli/parsers/query_accountManagement/README.md +16 -0
- catocli/parsers/query_accountManagement/__init__.py +17 -0
- catocli/parsers/query_admins/README.md +2 -2
- catocli/parsers/query_appStats/README.md +5 -5
- catocli/parsers/query_appStatsTimeSeries/README.md +4 -4
- catocli/parsers/query_auditFeed/README.md +2 -2
- catocli/parsers/query_container/README.md +8 -8
- catocli/parsers/query_entityLookup/README.md +6 -6
- catocli/parsers/query_events/README.md +5 -5
- catocli/parsers/query_eventsFeed/README.md +2 -2
- catocli/parsers/query_eventsTimeSeries/README.md +4 -4
- catocli/parsers/query_hardwareManagement/README.md +2 -2
- catocli/parsers/query_policy/README.md +3 -3
- catocli/parsers/query_xdr_stories/README.md +2 -2
- {catocli-1.0.14.dist-info → catocli-1.0.15.dist-info}/METADATA +1 -1
- {catocli-1.0.14.dist-info → catocli-1.0.15.dist-info}/RECORD +164 -153
- models/mutation.accountManagement.addAccount.json +908 -0
- models/mutation.accountManagement.removeAccount.json +446 -0
- models/mutation.accountManagement.updateAccount.json +524 -0
- models/mutation.admin.addAdmin.json +103 -103
- models/mutation.admin.removeAdmin.json +3 -3
- models/mutation.admin.updateAdmin.json +121 -121
- models/mutation.container.delete.json +67 -67
- models/mutation.policy.internetFirewall.addRule.json +2497 -1889
- models/mutation.policy.internetFirewall.addSection.json +92 -92
- models/mutation.policy.internetFirewall.createPolicyRevision.json +734 -546
- models/mutation.policy.internetFirewall.discardPolicyRevision.json +734 -546
- models/mutation.policy.internetFirewall.moveRule.json +723 -535
- models/mutation.policy.internetFirewall.moveSection.json +85 -85
- models/mutation.policy.internetFirewall.publishPolicyRevision.json +734 -546
- models/mutation.policy.internetFirewall.removeRule.json +710 -522
- models/mutation.policy.internetFirewall.removeSection.json +72 -72
- models/mutation.policy.internetFirewall.updatePolicy.json +734 -546
- models/mutation.policy.internetFirewall.updateRule.json +2476 -1885
- models/mutation.policy.internetFirewall.updateSection.json +85 -85
- models/mutation.policy.wanFirewall.addRule.json +2577 -1225
- models/mutation.policy.wanFirewall.addSection.json +92 -92
- models/mutation.policy.wanFirewall.createPolicyRevision.json +800 -455
- models/mutation.policy.wanFirewall.discardPolicyRevision.json +800 -455
- models/mutation.policy.wanFirewall.moveRule.json +789 -444
- models/mutation.policy.wanFirewall.moveSection.json +85 -85
- models/mutation.policy.wanFirewall.publishPolicyRevision.json +800 -455
- models/mutation.policy.wanFirewall.removeRule.json +776 -431
- models/mutation.policy.wanFirewall.removeSection.json +72 -72
- models/mutation.policy.wanFirewall.updatePolicy.json +800 -455
- models/mutation.policy.wanFirewall.updateRule.json +2597 -1265
- models/mutation.policy.wanFirewall.updateSection.json +85 -85
- models/mutation.site.addIpsecIkeV2Site.json +43 -43
- models/mutation.site.addIpsecIkeV2SiteTunnels.json +102 -102
- models/mutation.site.addNetworkRange.json +53 -53
- models/mutation.site.addSocketSite.json +43 -43
- models/mutation.site.addStaticHost.json +33 -33
- models/mutation.site.removeIpsecIkeV2SiteTunnels.json +47 -47
- models/mutation.site.removeNetworkRange.json +3 -3
- models/mutation.site.removeSite.json +3 -3
- models/mutation.site.removeStaticHost.json +3 -3
- models/mutation.site.updateHa.json +54 -54
- models/mutation.site.updateIpsecIkeV2SiteGeneralDetails.json +79 -79
- models/mutation.site.updateIpsecIkeV2SiteTunnels.json +123 -123
- models/mutation.site.updateNetworkRange.json +74 -74
- models/mutation.site.updateSiteGeneralDetails.json +73 -73
- models/mutation.site.updateSocketInterface.json +282 -282
- models/mutation.site.updateStaticHost.json +54 -54
- models/mutation.sites.addIpsecIkeV2Site.json +43 -43
- models/mutation.sites.addIpsecIkeV2SiteTunnels.json +102 -102
- models/mutation.sites.addNetworkRange.json +53 -53
- models/mutation.sites.addSocketSite.json +43 -43
- models/mutation.sites.addStaticHost.json +33 -33
- models/mutation.sites.removeIpsecIkeV2SiteTunnels.json +47 -47
- models/mutation.sites.removeNetworkRange.json +3 -3
- models/mutation.sites.removeSite.json +3 -3
- models/mutation.sites.removeStaticHost.json +3 -3
- models/mutation.sites.updateHa.json +54 -54
- models/mutation.sites.updateIpsecIkeV2SiteGeneralDetails.json +79 -79
- models/mutation.sites.updateIpsecIkeV2SiteTunnels.json +123 -123
- models/mutation.sites.updateNetworkRange.json +74 -74
- models/mutation.sites.updateSiteGeneralDetails.json +73 -73
- models/mutation.sites.updateSocketInterface.json +282 -282
- models/mutation.sites.updateStaticHost.json +54 -54
- models/query.accountManagement.json +355 -0
- models/query.accountMetrics.json +235 -235
- models/query.accountRoles.json +3 -3
- models/query.accountSnapshot.json +116 -116
- models/query.admin.json +24 -24
- models/query.admins.json +138 -138
- models/query.appStats.json +92 -92
- models/query.appStatsTimeSeries.json +78 -78
- models/query.auditFeed.json +77 -77
- models/query.container.json +192 -192
- models/query.entityLookup.json +154 -154
- models/query.events.json +54 -54
- models/query.eventsFeed.json +38 -38
- models/query.eventsTimeSeries.json +78 -78
- models/query.hardwareManagement.json +125 -125
- models/query.licensing.json +735 -177
- models/query.policy.json +1502 -970
- models/query.xdr.stories.json +842 -842
- models/query.xdr.story.json +610 -610
- schema/catolib.py +1 -11
- {catocli-1.0.14.dist-info → catocli-1.0.15.dist-info}/LICENSE +0 -0
- {catocli-1.0.14.dist-info → catocli-1.0.15.dist-info}/WHEEL +0 -0
- {catocli-1.0.14.dist-info → catocli-1.0.15.dist-info}/entry_points.txt +0 -0
- {catocli-1.0.14.dist-info → catocli-1.0.15.dist-info}/top_level.txt +0 -0
|
@@ -10,9 +10,9 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli mutation sites updateSiteGeneralDetails "$(cat < updateSiteGeneralDetails.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli mutation sites updateSiteGeneralDetails '{"
|
|
13
|
+
`catocli mutation sites updateSiteGeneralDetails '{"siteId": "ID", "updateSiteGeneralDetailsInput": {"description": {"description": "String"}, "name": {"name": "String"}, "siteType": {"siteType": "enum(SiteType)"}, "updateSiteLocationInput": {"address": {"address": "String"}, "cityName": {"cityName": "String"}, "countryCode": {"countryCode": "String"}, "stateCode": {"stateCode": "String"}, "timezone": {"timezone": "String"}}}}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for mutation.sites.updateSiteGeneralDetails ####
|
|
16
|
-
`UpdateSiteGeneralDetailsInput` [UpdateSiteGeneralDetailsInput] - (required) N/A
|
|
17
16
|
`accountId` [ID] - (required) N/A
|
|
18
17
|
`siteId` [ID] - (required) N/A
|
|
18
|
+
`updateSiteGeneralDetailsInput` [UpdateSiteGeneralDetailsInput] - (required) N/A
|
|
@@ -10,10 +10,10 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli mutation sites updateSocketInterface "$(cat < updateSocketInterface.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli mutation sites updateSocketInterface '{"
|
|
13
|
+
`catocli mutation sites updateSocketInterface '{"siteId": "ID", "socketInterfaceId": "enum(SocketInterfaceIDEnum)", "updateSocketInterfaceInput": {"destType": {"destType": "enum(SocketInterfaceDestType)"}, "name": {"name": "String"}, "socketInterfaceAltWanInput": {"privateGatewayIp": {"privateGatewayIp": "IPAddress"}, "privateInterfaceIp": {"privateInterfaceIp": "IPAddress"}, "privateNetwork": {"privateNetwork": "IPSubnet"}, "privateVlanTag": {"privateVlanTag": "Int"}, "publicGatewayIp": {"publicGatewayIp": "IPAddress"}, "publicInterfaceIp": {"publicInterfaceIp": "IPAddress"}, "publicNetwork": {"publicNetwork": "IPSubnet"}, "publicVlanTag": {"publicVlanTag": "Int"}}, "socketInterfaceBandwidthInput": {"downstreamBandwidth": {"downstreamBandwidth": "Int"}, "upstreamBandwidth": {"upstreamBandwidth": "Int"}}, "socketInterfaceLagInput": {"minLinks": {"minLinks": "Int"}}, "socketInterfaceLanInput": {"localIp": {"localIp": "IPAddress"}, "subnet": {"subnet": "IPSubnet"}, "translatedSubnet": {"translatedSubnet": "IPSubnet"}}, "socketInterfaceOffCloudInput": {"enabled": {"enabled": "Boolean"}, "publicIp": {"publicIp": "IPAddress"}, "publicStaticPort": {"publicStaticPort": "Int"}}, "socketInterfaceVrrpInput": {"vrrpType": {"vrrpType": "enum(VrrpType)"}}, "socketInterfaceWanInput": {"precedence": {"precedence": "enum(SocketInterfacePrecedenceEnum)"}, "role": {"role": "enum(SocketInterfaceRole)"}}}}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for mutation.sites.updateSocketInterface ####
|
|
16
|
-
`UpdateSocketInterfaceInput` [UpdateSocketInterfaceInput] - (required) N/A
|
|
17
16
|
`accountId` [ID] - (required) N/A
|
|
18
17
|
`siteId` [ID] - (required) N/A
|
|
19
18
|
`socketInterfaceId` [SocketInterfaceIDEnum] - (required) N/A Default Value: ['LAN1', 'LAN2', 'WAN1', 'WAN2', 'USB1', 'USB2', 'INT_1', 'INT_2', 'INT_3', 'INT_4', 'INT_5', 'INT_6', 'INT_7', 'INT_8', 'INT_9', 'INT_10', 'INT_11', 'INT_12', 'WLAN', 'LTE']
|
|
19
|
+
`updateSocketInterfaceInput` [UpdateSocketInterfaceInput] - (required) N/A
|
|
@@ -10,9 +10,9 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli mutation sites updateStaticHost "$(cat < updateStaticHost.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli mutation sites updateStaticHost '{"
|
|
13
|
+
`catocli mutation sites updateStaticHost '{"hostId": "ID", "updateStaticHostInput": {"ip": {"ip": "IPAddress"}, "macAddress": {"macAddress": "String"}, "name": {"name": "String"}}}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for mutation.sites.updateStaticHost ####
|
|
16
|
-
`UpdateStaticHostInput` [UpdateStaticHostInput] - (required) N/A
|
|
17
16
|
`accountId` [ID] - (required) N/A
|
|
18
17
|
`hostId` [ID] - (required) N/A
|
|
18
|
+
`updateStaticHostInput` [UpdateStaticHostInput] - (required) N/A
|
|
@@ -17,7 +17,10 @@ def createRequest(args, configuration):
|
|
|
17
17
|
except ValueError as e:
|
|
18
18
|
print("ERROR: Query argument must be valid json in quotes. ",e,'\n\nExample: \'{"yourKey":"yourValue"}\'')
|
|
19
19
|
exit()
|
|
20
|
-
|
|
20
|
+
if "accountId" in operation["args"]:
|
|
21
|
+
variablesObj["accountId"] = configuration.accountID
|
|
22
|
+
else:
|
|
23
|
+
variablesObj["accountID"] = configuration.accountID
|
|
21
24
|
isOk, invalidVars, message = validateArgs(variablesObj,operation)
|
|
22
25
|
if isOk==True:
|
|
23
26
|
body = generateGraphqlPayload(variablesObj,operation,operationName)
|
|
@@ -185,7 +188,7 @@ def validateArgs(variablesObj,operation):
|
|
|
185
188
|
if varName not in operation["operationArgs"]:
|
|
186
189
|
isOk = False
|
|
187
190
|
invalidVars.append('"'+varName+'"')
|
|
188
|
-
message = "Invalid argument names: "
|
|
191
|
+
message = "Invalid argument names. Looking for: "+", ".join(list(operation["operationArgs"].keys()))
|
|
189
192
|
if isOk==True:
|
|
190
193
|
for varName in operation["operationArgs"]:
|
|
191
194
|
if operation["operationArgs"][varName]["required"] and varName not in variablesObj:
|
|
@@ -214,11 +217,11 @@ def loadJSON(file):
|
|
|
214
217
|
exit()
|
|
215
218
|
|
|
216
219
|
def renderCamelCase(pathStr):
|
|
217
|
-
str = ""
|
|
220
|
+
str = ""
|
|
218
221
|
pathAry = pathStr.split(".")
|
|
219
222
|
for i, path in enumerate(pathAry):
|
|
220
223
|
if i == 0:
|
|
221
|
-
str += path
|
|
224
|
+
str += path[0].lower() + path[1:]
|
|
222
225
|
else:
|
|
223
226
|
str += path[0].upper() + path[1:]
|
|
224
227
|
return str
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
|
|
2
|
+
## CATO-CLI - query.accountManagement:
|
|
3
|
+
[Click here](https://api.catonetworks.com/documentation/#query-accountManagement) for documentation on this operation.
|
|
4
|
+
|
|
5
|
+
### Usage for query.accountManagement:
|
|
6
|
+
|
|
7
|
+
`catocli query accountManagement -h`
|
|
8
|
+
|
|
9
|
+
`catocli query accountManagement <json>`
|
|
10
|
+
|
|
11
|
+
`catocli query accountManagement "$(cat < accountManagement.json)"`
|
|
12
|
+
|
|
13
|
+
`catocli query accountManagement '{}'`
|
|
14
|
+
|
|
15
|
+
#### Operation Arguments for query.accountManagement ####
|
|
16
|
+
`accountId` [ID] - (required) N/A
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
|
|
2
|
+
from ..parserApiClient import createRequest, get_help
|
|
3
|
+
|
|
4
|
+
def query_accountManagement_parse(query_subparsers):
|
|
5
|
+
query_accountManagement_parser = query_subparsers.add_parser('accountManagement',
|
|
6
|
+
help='accountManagement() query operation',
|
|
7
|
+
usage=get_help("query_accountManagement"))
|
|
8
|
+
|
|
9
|
+
query_accountManagement_parser.add_argument('json', help='Variables in JSON format.')
|
|
10
|
+
query_accountManagement_parser.add_argument('-accountID', help='Override the CATO_ACCOUNT_ID environment variable with this value.')
|
|
11
|
+
query_accountManagement_parser.add_argument('-t', const=True, default=False, nargs='?',
|
|
12
|
+
help='Print test request preview without sending api call')
|
|
13
|
+
query_accountManagement_parser.add_argument('-v', const=True, default=False, nargs='?',
|
|
14
|
+
help='Verbose output')
|
|
15
|
+
query_accountManagement_parser.add_argument('-p', const=True, default=False, nargs='?',
|
|
16
|
+
help='Pretty print')
|
|
17
|
+
query_accountManagement_parser.set_defaults(func=createRequest,operation_name='query.accountManagement')
|
|
@@ -10,12 +10,12 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli query admins "$(cat < admins.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli query admins '{"
|
|
13
|
+
`catocli query admins '{"adminIDs": ["ID"], "from": "Int", "limit": "Int", "search": "String", "sortInput": {"field": {"field": "String"}, "order": {"order": "enum(DirectionInput)"}}}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for query.admins ####
|
|
16
|
-
`SortInput` [SortInput[]] - (optional) N/A
|
|
17
16
|
`accountID` [ID] - (required) N/A
|
|
18
17
|
`adminIDs` [ID[]] - (optional) N/A
|
|
19
18
|
`from` [Int] - (optional) N/A
|
|
20
19
|
`limit` [Int] - (optional) N/A
|
|
21
20
|
`search` [String] - (optional) N/A
|
|
21
|
+
`sortInput` [SortInput[]] - (optional) N/A
|
|
@@ -10,14 +10,14 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli query appStats "$(cat < appStats.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli query appStats '{"
|
|
13
|
+
`catocli query appStats '{"appStatsFilter": {"fieldName": {"fieldName": "enum(AppStatsFieldName)"}, "operator": {"operator": "enum(FilterOperator)"}, "values": {"values": ["String"]}}, "appStatsSort": {"fieldName": {"fieldName": "enum(AppStatsFieldName)"}, "order": {"order": "enum(DirectionEnum)"}}, "dimension": {"fieldName": {"fieldName": "enum(AppStatsFieldName)"}}, "from": "Int", "limit": "Int", "measure": {"aggType": {"aggType": "enum(AggregationType)"}, "fieldName": {"fieldName": "enum(AppStatsFieldName)"}, "trend": {"trend": "Boolean"}}, "timeFrame": "TimeFrame"}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for query.appStats ####
|
|
16
|
-
`AppStatsFilter` [AppStatsFilter[]] - (optional) N/A
|
|
17
|
-
`AppStatsSort` [AppStatsSort[]] - (optional) N/A
|
|
18
|
-
`Dimension` [Dimension[]] - (optional) N/A
|
|
19
|
-
`Measure` [Measure[]] - (optional) N/A
|
|
20
16
|
`accountID` [ID] - (required) Account ID
|
|
17
|
+
`appStatsFilter` [AppStatsFilter[]] - (optional) N/A
|
|
18
|
+
`appStatsSort` [AppStatsSort[]] - (optional) N/A
|
|
19
|
+
`dimension` [Dimension[]] - (optional) N/A
|
|
21
20
|
`from` [Int] - (optional) N/A
|
|
22
21
|
`limit` [Int] - (optional) N/A
|
|
22
|
+
`measure` [Measure[]] - (optional) N/A
|
|
23
23
|
`timeFrame` [TimeFrame] - (required) N/A
|
|
@@ -10,14 +10,14 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli query appStatsTimeSeries "$(cat < appStatsTimeSeries.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli query appStatsTimeSeries '{"
|
|
13
|
+
`catocli query appStatsTimeSeries '{"appStatsFilter": {"fieldName": {"fieldName": "enum(AppStatsFieldName)"}, "operator": {"operator": "enum(FilterOperator)"}, "values": {"values": ["String"]}}, "buckets": "Int", "dimension": {"fieldName": {"fieldName": "enum(AppStatsFieldName)"}}, "measure": {"aggType": {"aggType": "enum(AggregationType)"}, "fieldName": {"fieldName": "enum(AppStatsFieldName)"}, "trend": {"trend": "Boolean"}}, "perSecond": "Boolean", "timeFrame": "TimeFrame", "withMissingData": "Boolean"}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for query.appStatsTimeSeries ####
|
|
16
|
-
`AppStatsFilter` [AppStatsFilter[]] - (optional) N/A
|
|
17
|
-
`Dimension` [Dimension[]] - (optional) N/A
|
|
18
|
-
`Measure` [Measure[]] - (optional) N/A
|
|
19
16
|
`accountID` [ID] - (required) Account ID
|
|
17
|
+
`appStatsFilter` [AppStatsFilter[]] - (optional) N/A
|
|
20
18
|
`buckets` [Int] - (required) N/A
|
|
19
|
+
`dimension` [Dimension[]] - (optional) N/A
|
|
20
|
+
`measure` [Measure[]] - (optional) N/A
|
|
21
21
|
`perSecond` [Boolean] - (optional) whether to normalize the data into per second (i.e. divide by granularity)
|
|
22
22
|
`timeFrame` [TimeFrame] - (required) N/A
|
|
23
23
|
`withMissingData` [Boolean] - (optional) If false, the data field will be set to '0' for buckets with no reported data. Otherwise it will be set to -1
|
|
@@ -10,11 +10,11 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli query auditFeed "$(cat < auditFeed.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli query auditFeed '{"
|
|
13
|
+
`catocli query auditFeed '{"accountIDs": ["ID"], "auditFieldFilterInput": {"fieldNameInput": {"AuditFieldName": {"AuditFieldName": "enum(AuditFieldName)"}, "EventFieldName": {"EventFieldName": "enum(EventFieldName)"}}, "operator": {"operator": "enum(ElasticOperator)"}, "values": {"values": ["String"]}}, "fieldNames": "enum(AuditFieldName)", "marker": "String", "timeFrame": "TimeFrame"}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for query.auditFeed ####
|
|
16
|
-
`AuditFieldFilterInput` [AuditFieldFilterInput[]] - (optional) N/A
|
|
17
16
|
`accountIDs` [ID[]] - (optional) List of Unique Account Identifiers.
|
|
17
|
+
`auditFieldFilterInput` [AuditFieldFilterInput[]] - (optional) N/A
|
|
18
18
|
`fieldNames` [AuditFieldName[]] - (optional) N/A Default Value: ['admin', 'apiKey', 'model_name', 'admin_id', 'module', 'audit_creation_type', 'insertion_date', 'change_type', 'creation_date', 'model_type', 'account', 'account_id']
|
|
19
19
|
`marker` [String] - (optional) Marker to use to get results from
|
|
20
20
|
`timeFrame` [TimeFrame] - (required) N/A
|
|
@@ -10,14 +10,14 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli query container "$(cat < container.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli query container '{"
|
|
13
|
+
`catocli query container '{"containerSearchInput": {"containerRefInput": {"by": {"by": "enum(ObjectRefBy)"}, "input": {"input": "String"}}, "types": {"types": "enum(ContainerType)"}}, "downloadFqdnContainerFileInput": {"by": {"by": "enum(ObjectRefBy)"}, "input": {"input": "String"}}, "downloadIpAddressRangeContainerFileInput": {"by": {"by": "enum(ObjectRefBy)"}, "input": {"input": "String"}}, "fqdnContainerSearchFqdnInput": {"fqdn": {"fqdn": "Fqdn"}}, "fqdnContainerSearchInput": {"containerRefInput": {"by": {"by": "enum(ObjectRefBy)"}, "input": {"input": "String"}}}, "ipAddressRangeContainerSearchInput": {"containerRefInput": {"by": {"by": "enum(ObjectRefBy)"}, "input": {"input": "String"}}}, "ipAddressRangeContainerSearchIpAddressRangeInput": {"ipAddressRangeInput": {"from": {"from": "IPAddress"}, "to": {"to": "IPAddress"}}}}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for query.container ####
|
|
16
|
-
`ContainerSearchInput` [ContainerSearchInput] - (required) N/A
|
|
17
|
-
`DownloadFqdnContainerFileInput` [DownloadFqdnContainerFileInput] - (required) N/A
|
|
18
|
-
`DownloadIpAddressRangeContainerFileInput` [DownloadIpAddressRangeContainerFileInput] - (required) N/A
|
|
19
|
-
`FqdnContainerSearchFqdnInput` [FqdnContainerSearchFqdnInput] - (required) N/A
|
|
20
|
-
`FqdnContainerSearchInput` [FqdnContainerSearchInput] - (required) N/A
|
|
21
|
-
`IpAddressRangeContainerSearchInput` [IpAddressRangeContainerSearchInput] - (required) N/A
|
|
22
|
-
`IpAddressRangeContainerSearchIpAddressRangeInput` [IpAddressRangeContainerSearchIpAddressRangeInput] - (required) N/A
|
|
23
16
|
`accountId` [ID] - (required) N/A
|
|
17
|
+
`containerSearchInput` [ContainerSearchInput] - (required) N/A
|
|
18
|
+
`downloadFqdnContainerFileInput` [DownloadFqdnContainerFileInput] - (required) N/A
|
|
19
|
+
`downloadIpAddressRangeContainerFileInput` [DownloadIpAddressRangeContainerFileInput] - (required) N/A
|
|
20
|
+
`fqdnContainerSearchFqdnInput` [FqdnContainerSearchFqdnInput] - (required) N/A
|
|
21
|
+
`fqdnContainerSearchInput` [FqdnContainerSearchInput] - (required) N/A
|
|
22
|
+
`ipAddressRangeContainerSearchInput` [IpAddressRangeContainerSearchInput] - (required) N/A
|
|
23
|
+
`ipAddressRangeContainerSearchIpAddressRangeInput` [IpAddressRangeContainerSearchIpAddressRangeInput] - (required) N/A
|
|
@@ -10,22 +10,22 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli query entityLookup "$(cat < entityLookup.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli query entityLookup '{"
|
|
13
|
+
`catocli query entityLookup '{"entityIDs": ["ID"], "entityInput": {"id": {"id": "ID"}, "name": {"name": "String"}, "type": {"type": "enum(EntityType)"}}, "from": "Int", "helperFields": ["String"], "limit": "Int", "lookupFilterInput": {"filter": {"filter": "enum(LookupFilterType)"}, "value": {"value": "String"}}, "search": "String", "sortInput": {"field": {"field": "String"}, "order": {"order": "enum(DirectionInput)"}}, "type": "enum(EntityType)"}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for query.entityLookup ####
|
|
16
|
-
`EntityInput` [EntityInput] - (optional) Return items under a parent entity (can be site, vpn user, etc),
|
|
17
|
-
used to filter for networks that belong to a specific site for example
|
|
18
|
-
`LookupFilterInput` [LookupFilterInput[]] - (optional) Custom filters for entityLookup
|
|
19
|
-
`SortInput` [SortInput[]] - (optional) Adds additional sort criteria(s) for the lookup.
|
|
20
|
-
This option is not universally available, and may not be applicable specific Entity types.
|
|
21
16
|
`accountID` [ID] - (required) The account ID (or 0 for non-authenticated requests)
|
|
22
17
|
`entityIDs` [ID[]] - (optional) Adds additional search criteria to fetch by the selected list of entity IDs. This option is not
|
|
23
18
|
universally available, and may not be applicable specific Entity types. If used on non applicable entity
|
|
24
19
|
type, an error will be generated.
|
|
20
|
+
`entityInput` [EntityInput] - (optional) Return items under a parent entity (can be site, vpn user, etc),
|
|
21
|
+
used to filter for networks that belong to a specific site for example
|
|
25
22
|
`from` [Int] - (optional) Sets the offset number of items (for paging)
|
|
26
23
|
`helperFields` [String[]] - (optional) Additional helper fields
|
|
27
24
|
`limit` [Int] - (optional) Sets the maximum number of items to retrieve
|
|
25
|
+
`lookupFilterInput` [LookupFilterInput[]] - (optional) Custom filters for entityLookup
|
|
28
26
|
`search` [String] - (optional) Adds additional search parameters for the lookup. Available options:
|
|
29
27
|
country lookup: "removeExcluded" to return only allowed countries
|
|
30
28
|
countryState lookup: country code ("US", "CN", etc) to get country's states
|
|
29
|
+
`sortInput` [SortInput[]] - (optional) Adds additional sort criteria(s) for the lookup.
|
|
30
|
+
This option is not universally available, and may not be applicable specific Entity types.
|
|
31
31
|
`type` [EntityType] - (required) Type of entity to lookup for Default Value: ['account', 'site', 'vpnUser', 'country', 'countryState', 'timezone', 'host', 'any', 'networkInterface', 'location', 'admin', 'localRouting', 'lanFirewall', 'allocatedIP', 'siteRange', 'simpleService', 'availableSiteUsage', 'availablePooledUsage', 'dhcpRelayGroup', 'portProtocol', 'city', 'groupSubscription', 'mailingListSubscription', 'webhookSubscription']
|
|
@@ -10,14 +10,14 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli query events "$(cat < events.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli query events '{"
|
|
13
|
+
`catocli query events '{"eventsDimension": {"fieldName": {"fieldName": "enum(EventFieldName)"}}, "eventsFilter": {"fieldName": {"fieldName": "enum(EventFieldName)"}, "operator": {"operator": "enum(FilterOperator)"}, "values": {"values": ["String"]}}, "eventsMeasure": {"aggType": {"aggType": "enum(AggregationType)"}, "fieldName": {"fieldName": "enum(EventFieldName)"}, "trend": {"trend": "Boolean"}}, "eventsSort": {"fieldName": {"fieldName": "enum(EventFieldName)"}, "order": {"order": "enum(DirectionEnum)"}}, "from": "Int", "limit": "Int", "timeFrame": "TimeFrame"}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for query.events ####
|
|
16
|
-
`EventsDimension` [EventsDimension[]] - (optional) N/A
|
|
17
|
-
`EventsFilter` [EventsFilter[]] - (optional) N/A
|
|
18
|
-
`EventsMeasure` [EventsMeasure[]] - (optional) N/A
|
|
19
|
-
`EventsSort` [EventsSort[]] - (optional) N/A
|
|
20
16
|
`accountID` [ID] - (required) Account ID
|
|
17
|
+
`eventsDimension` [EventsDimension[]] - (optional) N/A
|
|
18
|
+
`eventsFilter` [EventsFilter[]] - (optional) N/A
|
|
19
|
+
`eventsMeasure` [EventsMeasure[]] - (optional) N/A
|
|
20
|
+
`eventsSort` [EventsSort[]] - (optional) N/A
|
|
21
21
|
`from` [Int] - (optional) N/A
|
|
22
22
|
`limit` [Int] - (optional) N/A
|
|
23
23
|
`timeFrame` [TimeFrame] - (required) N/A
|
|
@@ -10,10 +10,10 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli query eventsFeed "$(cat < eventsFeed.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli query eventsFeed '{"
|
|
13
|
+
`catocli query eventsFeed '{"accountIDs": ["ID"], "eventFeedFieldFilterInput": {"fieldName": {"fieldName": "enum(EventFeedFilterFieldName)"}, "operator": {"operator": "enum(EventFeedFilterOperator)"}, "values": {"values": ["String"]}}, "fieldNames": "enum(EventFieldName)", "marker": "String"}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for query.eventsFeed ####
|
|
16
|
-
`EventFeedFieldFilterInput` [EventFeedFieldFilterInput[]] - (optional) N/A
|
|
17
16
|
`accountIDs` [ID[]] - (optional) List of Unique Account Identifiers.
|
|
17
|
+
`eventFeedFieldFilterInput` [EventFeedFieldFilterInput[]] - (optional) N/A
|
|
18
18
|
`fieldNames` [EventFieldName[]] - (optional) N/A Default Value: ['src_site', 'src_site_id', 'static_host', 'user_id', 'dest_site', 'dest_site_id', 'src_or_dest_site_id', 'rule', 'ISP_name', 'socket_interface', 'custom_category', 'directory_host_name', 'dest_port', 'bgp_peer_asn', 'user_reference_id', 'src_port', 'link_health_pkt_loss', 'pop_name', 'host_ip', 'event_message', 'src_site_name', 'domain_name', 'dest_ip', 'file_hash', 'src_isp_ip', 'authentication_type', 'rule_name', 'directory_sync_result', 'host_mac', 'threat_type', 'threat_verdict', 'device_name', 'link_type', 'login_type', 'configured_host_name', 'internalId', 'directory_sync_type', 'vpn_user_email', 'client_class', 'incident_aggregation', 'socket_reset', 'user_name', 'client_version', 'file_size', 'registration_code', 'bgp_error_code', 'bgp_peer_description', 'threat_name', 'qos_reported_time', 'ip_protocol', 'bgp_cato_asn', 'src_ip', 'threat_reference', 'action', 'windows_domain_name', 'risk_level', 'socket_old_version', 'link_health_latency', 'tunnel_protocol', 'socket_new_version', 'socket_version', 'link_health_jitter', 'upgrade_start_time', 'bgp_cato_ip', 'categories', 'rule_id', 'socket_role', 'targets_cardinality', 'upgrade_initiated_by', 'dest_is_site_or_vpn', 'bgp_peer_ip', 'src_is_site_or_vpn', 'ad_name', 'user_awareness_method', 'link_health_is_congested', 'subnet_name', 'os_version', 'event_sub_type', 'os_type', 'traffic_direction', 'bgp_suberror_code', 'bgp_route_cidr', 'incident_id', 'application', 'application_name', 'application_id', 'upgrade_end_time', 'socket_interface_id', 'custom_categories', 'custom_category_id', 'custom_category_name', 'src_country', 'src_country_code', 'event_count', 'file_name', 'directory_ip', 'time', 'url', 'dest_country', 'dest_country_code', 'flows_cardinality', 'dest_site_name', 'event_type', 'account_id', 'signature_id', 'client_cert_expires', 'client_cert_name', 'is_sanctioned_app', 'app_activity', 'app_activity_type', 'device_posture_profile', 'device_posture_profiles', 'full_path_url', 'application_risk', 'mitre_attack_techniques', 'mitre_attack_subtechniques', 'mitre_attack_tactics', 'indicator', 'connector_type', 'connector_name', 'connector_status', 'parent_connector_name', 'file_type', 'dlp_fail_mode', 'dlp_profiles', 'matched_data_types', 'severity', 'owner', 'collaborators', 'email_subject', 'sharing_scope', 'dns_protection_category', 'final_object_status', 'object_name', 'object_type', 'object_id', 'alert_id', 'vendor', 'vendor_user_id', 'status', 'classification', 'quarantine_folder_path', 'title', 'recommended_actions', 'pid', 'parent_pid', 'process_path', 'failure_reason', 'out_of_band_access', 'logged_in_user', 'http_request_method', 'xff', 'dns_query', 'key_name', 'api_type', 'api_name', 'app_stack', 'tls_rule_name', 'tls_certificate_error', 'tls_version', 'tls_error_type', 'tls_error_description', 'cato_app', 'prompt_action', 'device_id', 'visible_device_id', 'auth_method', 'bypass_method', 'bypass_duration_sec', 'bypass_reason', 'sign_in_event_types', 'tenant_id', 'tenant_name', 'user_agent', 'vendor_event_id', 'vendor_device_id', 'vendor_device_name', 'is_compliant', 'is_managed', 'trust_type', 'confidence_level', 'dlp_scan_types', 'network_access', 'analyst_verdict', 'criticality', 'indication', 'producer', 'story_id', 'raw_data', 'trigger', 'network_rule', 'congestion_algorithm', 'tcp_acceleration', 'tls_inspection', 'public_ip', 'egress_site_name', 'egress_pop_name', 'qos_priority', 'split_tunnel_configuration', 'pac_file', 'always_on_configuration', 'vpn_lan_access', 'connect_on_boot', 'trusted_networks', 'office_mode', 'device_certificate', 'tunnel_ip_protocol', 'notification_description', 'notification_api_error', 'reference_url', 'app_activity_category', 'is_admin_activity', 'is_admin', 'collaborator_name', 'dest_group_id', 'dest_group_name', 'access_method', 'vendor_collaborator_id', 'device_categories', 'device_manufacturer', 'device_model', 'device_os_type', 'device_type']
|
|
19
19
|
`marker` [String] - (optional) Marker to use to get results from
|
|
@@ -10,14 +10,14 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli query eventsTimeSeries "$(cat < eventsTimeSeries.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli query eventsTimeSeries '{"
|
|
13
|
+
`catocli query eventsTimeSeries '{"buckets": "Int", "eventsDimension": {"fieldName": {"fieldName": "enum(EventFieldName)"}}, "eventsFilter": {"fieldName": {"fieldName": "enum(EventFieldName)"}, "operator": {"operator": "enum(FilterOperator)"}, "values": {"values": ["String"]}}, "eventsMeasure": {"aggType": {"aggType": "enum(AggregationType)"}, "fieldName": {"fieldName": "enum(EventFieldName)"}, "trend": {"trend": "Boolean"}}, "perSecond": "Boolean", "timeFrame": "TimeFrame", "withMissingData": "Boolean"}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for query.eventsTimeSeries ####
|
|
16
|
-
`EventsDimension` [EventsDimension[]] - (optional) N/A
|
|
17
|
-
`EventsFilter` [EventsFilter[]] - (optional) N/A
|
|
18
|
-
`EventsMeasure` [EventsMeasure[]] - (optional) N/A
|
|
19
16
|
`accountID` [ID] - (required) Account ID
|
|
20
17
|
`buckets` [Int] - (required) N/A
|
|
18
|
+
`eventsDimension` [EventsDimension[]] - (optional) N/A
|
|
19
|
+
`eventsFilter` [EventsFilter[]] - (optional) N/A
|
|
20
|
+
`eventsMeasure` [EventsMeasure[]] - (optional) N/A
|
|
21
21
|
`perSecond` [Boolean] - (optional) whether to normalize the data into per second (i.e. divide by granularity)
|
|
22
22
|
`timeFrame` [TimeFrame] - (required) N/A
|
|
23
23
|
`withMissingData` [Boolean] - (optional) If false, the data field will be set to '0' for buckets with no reported data. Otherwise it will be set to -1
|
|
@@ -10,8 +10,8 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli query hardwareManagement "$(cat < hardwareManagement.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli query hardwareManagement '{"
|
|
13
|
+
`catocli query hardwareManagement '{"socketInventoryInput": {"pagingInput": {"from": {"from": "Int"}, "limit": {"limit": "Int"}}, "socketInventoryFilterInput": {"freeText": {"search": {"search": "String"}}}, "socketInventoryOrderInput": {"deliverySiteName": {"direction": {"direction": "enum(SortOrder)"}, "priority": {"priority": "Int"}}, "description": {"direction": {"direction": "enum(SortOrder)"}, "priority": {"priority": "Int"}}, "installedSite": {"direction": {"direction": "enum(SortOrder)"}, "priority": {"priority": "Int"}}, "serialNumber": {"direction": {"direction": "enum(SortOrder)"}, "priority": {"priority": "Int"}}, "shippingCompany": {"direction": {"direction": "enum(SortOrder)"}, "priority": {"priority": "Int"}}, "shippingDate": {"direction": {"direction": "enum(SortOrder)"}, "priority": {"priority": "Int"}}, "socketType": {"direction": {"direction": "enum(SortOrder)"}, "priority": {"priority": "Int"}}, "status": {"direction": {"direction": "enum(SortOrder)"}, "priority": {"priority": "Int"}}}}}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for query.hardwareManagement ####
|
|
16
|
-
`SocketInventoryInput` [SocketInventoryInput] - (optional) N/A
|
|
17
16
|
`accountId` [ID] - (required) N/A
|
|
17
|
+
`socketInventoryInput` [SocketInventoryInput] - (optional) N/A
|
|
@@ -10,9 +10,9 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli query policy "$(cat < policy.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli query policy '{"
|
|
13
|
+
`catocli query policy '{"internetFirewallPolicyInput": {"policyRevisionInput": {"id": {"id": "ID"}, "type": {"type": "enum(PolicyRevisionType)"}}}, "wanFirewallPolicyInput": {"policyRevisionInput": {"id": {"id": "ID"}, "type": {"type": "enum(PolicyRevisionType)"}}}}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for query.policy ####
|
|
16
|
-
`InternetFirewallPolicyInput` [InternetFirewallPolicyInput] - (optional) N/A
|
|
17
|
-
`WanFirewallPolicyInput` [WanFirewallPolicyInput] - (optional) N/A
|
|
18
16
|
`accountId` [ID] - (required) N/A
|
|
17
|
+
`internetFirewallPolicyInput` [InternetFirewallPolicyInput] - (optional) N/A
|
|
18
|
+
`wanFirewallPolicyInput` [WanFirewallPolicyInput] - (optional) N/A
|
|
@@ -10,9 +10,9 @@
|
|
|
10
10
|
|
|
11
11
|
`catocli query xdr stories "$(cat < stories.json)"`
|
|
12
12
|
|
|
13
|
-
`catocli query xdr stories '{"
|
|
13
|
+
`catocli query xdr stories '{"perSecond": "Boolean", "storyInput": {"pagingInput": {"from": {"from": "Int"}, "limit": {"limit": "Int"}}, "storyFilterInput": {"accountId": {"in": {"in": ["ID"]}, "not_in": {"not_in": ["ID"]}}, "criticality": {"eq": {"eq": "Int"}, "gt": {"gt": "Int"}, "gte": {"gte": "Int"}, "in": {"in": ["Int"]}, "lt": {"lt": "Int"}, "lte": {"lte": "Int"}, "not_in": {"not_in": ["Int"]}}, "engineType": {"in": {"in": "enum(StoryEngineTypeEnum)"}, "not_in": {"not_in": "enum(StoryEngineTypeEnum)"}}, "incidentId": {"contains": {"contains": "String"}, "in": {"in": ["String"]}, "not_in": {"not_in": ["String"]}}, "ioa": {"contains": {"contains": "String"}, "in": {"in": ["String"]}, "not_in": {"not_in": ["String"]}}, "muted": {"is": {"is": "String"}}, "producer": {"in": {"in": "enum(StoryProducerEnum)"}, "not_in": {"not_in": "enum(StoryProducerEnum)"}}, "queryName": {"contains": {"contains": "String"}, "in": {"in": ["String"]}, "not_in": {"not_in": ["String"]}}, "severity": {"in": {"in": "enum(SeverityEnum)"}, "not_in": {"not_in": "enum(SeverityEnum)"}}, "source": {"contains": {"contains": "String"}, "in": {"in": ["String"]}, "not_in": {"not_in": ["String"]}}, "sourceIp": {"contains": {"contains": "String"}, "in": {"in": ["String"]}, "not_in": {"not_in": ["String"]}}, "status": {"in": {"in": "enum(StoryStatusEnum)"}, "not_in": {"not_in": "enum(StoryStatusEnum)"}}, "storyId": {"in": {"in": ["ID"]}, "not_in": {"not_in": ["ID"]}}, "timeFrame": {"time": {"time": "TimeFrame"}, "timeFrameModifier": {"timeFrameModifier": "enum(TimeFrameModifier)"}}, "vendor": {"in": {"in": "enum(VendorEnum)"}, "not_in": {"not_in": "enum(VendorEnum)"}}, "verdict": {"in": {"in": "enum(StoryVerdictEnum)"}, "not_in": {"not_in": "enum(StoryVerdictEnum)"}}}, "storySortInput": {"fieldName": {"fieldName": "enum(StorySortFieldName)"}, "order": {"order": "enum(SortDirectionEnum)"}}}}'`
|
|
14
14
|
|
|
15
15
|
#### Operation Arguments for query.xdr.stories ####
|
|
16
|
-
`StoryInput` [StoryInput] - (required) N/A
|
|
17
16
|
`accountID` [ID] - (required) N/A
|
|
18
17
|
`perSecond` [Boolean] - (optional) whether to normalize the data into per second (i.e. divide by granularity)
|
|
18
|
+
`storyInput` [StoryInput] - (required) N/A
|