Detect and Respond Traffic Detection Models

List Traffic Detection Models

get

Returns an array of Traffic Detection Models.

Authorizations

BearerAuth

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Responses

200

List of Requested Traffic Detection Models

application/json

400

Bad Request. Typically due to a malformatted JSON body, or parameter values are not validating.

application/json

401

Access token is missing or invalid

application/json

403

Access is forbidden

application/json

default

Unknown Error Occurred

application/json

get

/api/v1/rule-engine/algorithms

HTTPcURLJavaScriptPython

GET /api/v1/rule-engine/algorithms HTTP/1.1
Host: api.netography.com
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "meta": {
    "code": 200,
    "count": 1
  },
  "data": [
    {
      "algo_type": "TDM",
      "beta": false,
      "created": 1640995200,
      "id": "127e5619-5c3c-4314-9d74-c11d07c9361e",
      "recommended": false,
      "subscription": {
        "all": "subscribed"
      },
      "subscriptiontype": "optout",
      "system": false,
      "systemdefault": false,
      "updated": 1641995200,
      "bypassdisplay": false,
      "bypassrule": false,
      "categories": [
        "system"
      ],
      "description": "detection model description",
      "discards": [
        "bits > 10000"
      ],
      "enabled": true,
      "factors": [
        "srcip"
      ],
      "name": "new_ndm_name",
      "rollupperiod": 300,
      "search_by": [
        {
          "search": [
            "bits > 10000"
          ],
          "type": "all"
        }
      ],
      "thresholds": [
        {
          "severity": "medium",
          "threshold": "average(bits) > 500"
        }
      ],
      "track_by": [
        [
          "srcip"
        ]
      ],
      "updateinterval": 0,
      "algo_record_type": "flow"
    }
  ]
}

Create Traffic Detection Model

post

Creates a traffic detection model from the data that's been supplied. Do not provide an id. IDs are auto generated

Authorizations

BearerAuth

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Body

application/json

objectOptional

Traffic Detection Model Create or Update Config

Responses

201

Requested Traffic Detection Model

application/json

400

Bad Request. Typically due to a malformatted JSON body, or parameter values are not validating.

application/json

401

Access token is missing or invalid

application/json

403

Access is forbidden

application/json

default

Unknown Error Occurred

application/json

post

/api/v1/rule-engine/algorithm

HTTPcURLJavaScriptPython

POST /api/v1/rule-engine/algorithm HTTP/1.1
Host: api.netography.com
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 408

{
  "bypassdisplay": false,
  "bypassrule": false,
  "categories": [
    "system"
  ],
  "description": "detection model description",
  "discards": [
    "bits > 10000"
  ],
  "enabled": true,
  "factors": [
    "srcip"
  ],
  "name": "new_ndm_name",
  "rollupperiod": 300,
  "search_by": [
    {
      "search": [
        "bits > 10000"
      ],
      "type": "all"
    }
  ],
  "thresholds": [
    {
      "severity": "medium",
      "threshold": "average(bits) > 500"
    }
  ],
  "track_by": [
    [
      "srcip"
    ]
  ],
  "updateinterval": 0,
  "algo_record_type": "flow"
}

{
  "meta": {
    "code": 200,
    "count": 1
  },
  "data": [
    {
      "algo_type": "TDM",
      "beta": false,
      "created": 1640995200,
      "id": "127e5619-5c3c-4314-9d74-c11d07c9361e",
      "recommended": false,
      "subscription": {
        "all": "subscribed"
      },
      "subscriptiontype": "optout",
      "system": false,
      "systemdefault": false,
      "updated": 1641995200,
      "bypassdisplay": false,
      "bypassrule": false,
      "categories": [
        "system"
      ],
      "description": "detection model description",
      "discards": [
        "bits > 10000"
      ],
      "enabled": true,
      "factors": [
        "srcip"
      ],
      "name": "new_ndm_name",
      "rollupperiod": 300,
      "search_by": [
        {
          "search": [
            "bits > 10000"
          ],
          "type": "all"
        }
      ],
      "thresholds": [
        {
          "severity": "medium",
          "threshold": "average(bits) > 500"
        }
      ],
      "track_by": [
        [
          "srcip"
        ]
      ],
      "updateinterval": 0,
      "algo_record_type": "flow"
    }
  ]
}

Fetch Traffic Detection Model

get

Fetches a specific traffic detection model from the ID supplied in the path.

Authorizations

BearerAuth

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

idstringRequired

The ID of the traffic detection model to be returned.

Responses

200

Requested Traffic Detection Model

application/json

400

Bad Request. Typically due to a malformatted JSON body, or parameter values are not validating.

application/json

401

Access token is missing or invalid

application/json

403

Access is forbidden

application/json

default

Unknown Error Occurred

application/json

get

/api/v1/rule-engine/algorithm/{id}

HTTPcURLJavaScriptPython

GET /api/v1/rule-engine/algorithm/{id} HTTP/1.1
Host: api.netography.com
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "meta": {
    "code": 200,
    "count": 1
  },
  "data": [
    {
      "algo_type": "TDM",
      "beta": false,
      "created": 1640995200,
      "id": "127e5619-5c3c-4314-9d74-c11d07c9361e",
      "recommended": false,
      "subscription": {
        "all": "subscribed"
      },
      "subscriptiontype": "optout",
      "system": false,
      "systemdefault": false,
      "updated": 1641995200,
      "bypassdisplay": false,
      "bypassrule": false,
      "categories": [
        "system"
      ],
      "description": "detection model description",
      "discards": [
        "bits > 10000"
      ],
      "enabled": true,
      "factors": [
        "srcip"
      ],
      "name": "new_ndm_name",
      "rollupperiod": 300,
      "search_by": [
        {
          "search": [
            "bits > 10000"
          ],
          "type": "all"
        }
      ],
      "thresholds": [
        {
          "severity": "medium",
          "threshold": "average(bits) > 500"
        }
      ],
      "track_by": [
        [
          "srcip"
        ]
      ],
      "updateinterval": 0,
      "algo_record_type": "flow"
    }
  ]
}

Update Traffic Detection Model

put

Update a traffic detection model given the provided object. This does not do a diff. You must send the complete object.

Authorizations

BearerAuth

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

idstringRequired

The ID of the traffic detection model to be updated

Body

application/json

objectOptional

Traffic Detection Model Create or Update Config

Responses

200

Requested Traffic Detection Model

application/json

400

Bad Request. Typically due to a malformatted JSON body, or parameter values are not validating.

application/json

401

Access token is missing or invalid

application/json

403

Access is forbidden

application/json

default

Unknown Error Occurred

application/json

put

/api/v1/rule-engine/algorithm/{id}

HTTPcURLJavaScriptPython

PUT /api/v1/rule-engine/algorithm/{id} HTTP/1.1
Host: api.netography.com
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 408

{
  "bypassdisplay": false,
  "bypassrule": false,
  "categories": [
    "system"
  ],
  "description": "detection model description",
  "discards": [
    "bits > 10000"
  ],
  "enabled": true,
  "factors": [
    "srcip"
  ],
  "name": "new_ndm_name",
  "rollupperiod": 300,
  "search_by": [
    {
      "search": [
        "bits > 10000"
      ],
      "type": "all"
    }
  ],
  "thresholds": [
    {
      "severity": "medium",
      "threshold": "average(bits) > 500"
    }
  ],
  "track_by": [
    [
      "srcip"
    ]
  ],
  "updateinterval": 0,
  "algo_record_type": "flow"
}

{
  "meta": {
    "code": 200,
    "count": 1
  },
  "data": [
    {
      "algo_type": "TDM",
      "beta": false,
      "created": 1640995200,
      "id": "127e5619-5c3c-4314-9d74-c11d07c9361e",
      "recommended": false,
      "subscription": {
        "all": "subscribed"
      },
      "subscriptiontype": "optout",
      "system": false,
      "systemdefault": false,
      "updated": 1641995200,
      "bypassdisplay": false,
      "bypassrule": false,
      "categories": [
        "system"
      ],
      "description": "detection model description",
      "discards": [
        "bits > 10000"
      ],
      "enabled": true,
      "factors": [
        "srcip"
      ],
      "name": "new_ndm_name",
      "rollupperiod": 300,
      "search_by": [
        {
          "search": [
            "bits > 10000"
          ],
          "type": "all"
        }
      ],
      "thresholds": [
        {
          "severity": "medium",
          "threshold": "average(bits) > 500"
        }
      ],
      "track_by": [
        [
          "srcip"
        ]
      ],
      "updateinterval": 0,
      "algo_record_type": "flow"
    }
  ]
}

Delete Traffic Detection Model

delete

Deletes a traffic detection model

Authorizations

BearerAuth

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

idstringRequired

The ID of the traffic detection model to be deleted

Responses

204

An empty array

400

Bad Request. Typically due to a malformatted JSON body, or parameter values are not validating.

application/json

401

Access token is missing or invalid

application/json

403

Access is forbidden

application/json

default

Unknown Error Occurred

application/json

delete

/api/v1/rule-engine/algorithm/{id}

HTTPcURLJavaScriptPython

DELETE /api/v1/rule-engine/algorithm/{id} HTTP/1.1
Host: api.netography.com
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

No content

Enable Traffic Detection Model

put

Enables a traffic detection model

Authorizations

BearerAuth

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

idstringRequired

The ID of the traffic detection model to be enabled

Responses

200

Requested Traffic Detection Model

application/json

400

Bad Request. Typically due to a malformatted JSON body, or parameter values are not validating.

application/json

401

Access token is missing or invalid

application/json

403

Access is forbidden

application/json

default

Unknown Error Occurred

application/json

put

/api/v1/rule-engine/algorithm/{id}/enable

HTTPcURLJavaScriptPython

PUT /api/v1/rule-engine/algorithm/{id}/enable HTTP/1.1
Host: api.netography.com
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "meta": {
    "code": 200,
    "count": 1
  },
  "data": [
    {
      "algo_type": "TDM",
      "beta": false,
      "created": 1640995200,
      "id": "127e5619-5c3c-4314-9d74-c11d07c9361e",
      "recommended": false,
      "subscription": {
        "all": "subscribed"
      },
      "subscriptiontype": "optout",
      "system": false,
      "systemdefault": false,
      "updated": 1641995200,
      "bypassdisplay": false,
      "bypassrule": false,
      "categories": [
        "system"
      ],
      "description": "detection model description",
      "discards": [
        "bits > 10000"
      ],
      "enabled": true,
      "factors": [
        "srcip"
      ],
      "name": "new_ndm_name",
      "rollupperiod": 300,
      "search_by": [
        {
          "search": [
            "bits > 10000"
          ],
          "type": "all"
        }
      ],
      "thresholds": [
        {
          "severity": "medium",
          "threshold": "average(bits) > 500"
        }
      ],
      "track_by": [
        [
          "srcip"
        ]
      ],
      "updateinterval": 0,
      "algo_record_type": "flow"
    }
  ]
}

Disable Traffic Detection Model

put

Disables a traffic detection model

Authorizations

BearerAuth

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

idstringRequired

The ID of the traffic detection model to be disabled

Responses

200

Requested Traffic Detection Model

application/json

400

Bad Request. Typically due to a malformatted JSON body, or parameter values are not validating.

application/json

401

Access token is missing or invalid

application/json

403

Access is forbidden

application/json

default

Unknown Error Occurred

application/json

put

/api/v1/rule-engine/algorithm/{id}/disable

HTTPcURLJavaScriptPython

PUT /api/v1/rule-engine/algorithm/{id}/disable HTTP/1.1
Host: api.netography.com
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "meta": {
    "code": 200,
    "count": 1
  },
  "data": [
    {
      "algo_type": "TDM",
      "beta": false,
      "created": 1640995200,
      "id": "127e5619-5c3c-4314-9d74-c11d07c9361e",
      "recommended": false,
      "subscription": {
        "all": "subscribed"
      },
      "subscriptiontype": "optout",
      "system": false,
      "systemdefault": false,
      "updated": 1641995200,
      "bypassdisplay": false,
      "bypassrule": false,
      "categories": [
        "system"
      ],
      "description": "detection model description",
      "discards": [
        "bits > 10000"
      ],
      "enabled": true,
      "factors": [
        "srcip"
      ],
      "name": "new_ndm_name",
      "rollupperiod": 300,
      "search_by": [
        {
          "search": [
            "bits > 10000"
          ],
          "type": "all"
        }
      ],
      "thresholds": [
        {
          "severity": "medium",
          "threshold": "average(bits) > 500"
        }
      ],
      "track_by": [
        [
          "srcip"
        ]
      ],
      "updateinterval": 0,
      "algo_record_type": "flow"
    }
  ]
}

Reset Traffic Detection Model

put

Resets a customized system traffic detection model

Authorizations

BearerAuth

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

idstringRequired

The ID of the traffic detection model to be reseted

Responses

200

Requested Traffic Detection Model

application/json

400

Bad Request. Typically due to a malformatted JSON body, or parameter values are not validating.

application/json

401

Access token is missing or invalid

application/json

403

Access is forbidden

application/json

default

Unknown Error Occurred

application/json

put

/api/v1/rule-engine/algorithm/{id}/reset

HTTPcURLJavaScriptPython

PUT /api/v1/rule-engine/algorithm/{id}/reset HTTP/1.1
Host: api.netography.com
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "meta": {
    "code": 200,
    "count": 1
  },
  "data": [
    {
      "algo_type": "TDM",
      "beta": false,
      "created": 1640995200,
      "id": "127e5619-5c3c-4314-9d74-c11d07c9361e",
      "recommended": false,
      "subscription": {
        "all": "subscribed"
      },
      "subscriptiontype": "optout",
      "system": false,
      "systemdefault": false,
      "updated": 1641995200,
      "bypassdisplay": false,
      "bypassrule": false,
      "categories": [
        "system"
      ],
      "description": "detection model description",
      "discards": [
        "bits > 10000"
      ],
      "enabled": true,
      "factors": [
        "srcip"
      ],
      "name": "new_ndm_name",
      "rollupperiod": 300,
      "search_by": [
        {
          "search": [
            "bits > 10000"
          ],
          "type": "all"
        }
      ],
      "thresholds": [
        {
          "severity": "medium",
          "threshold": "average(bits) > 500"
        }
      ],
      "track_by": [
        [
          "srcip"
        ]
      ],
      "updateinterval": 0,
      "algo_record_type": "flow"
    }
  ]
}