Netography APIs

API Overview
API Recipes
Create a Netography API Key
Authentication
Analytics
Raw Records - Search
- Field Valuesget
- Search Recordspost
Raw Records - Fetch
- Fetch Recordget
Block List
- Clear the Block Listdelete
Intelligence
Labels - IPs
Labels - Ports
Configuration
- Netography AWS Custom Trust Policyget
Detect and Respond - Detection Categories
Detect and Respond - Traffic Detection Models
Detect and Respond - Context Creation Models
Detect and Respond - Response Policies
Detect and Respond - Threshold Overrides
Traffic Sources - Devices
Traffic Sources - DNS Devices
Traffic Sources - VPCs
Integrations - Context
Integrations - Response
Tags
Roles
Users
API Keys
Resellers
Settings - Traffic Classification
Settings - Security
- Get Allowed IPsget
- Update Allowed IPsput
Auto Thresholds
MITRE ATT&CK
- List MITRE tacticsget
- List MITRE techniques for a given tacticget

Netography APIs

API Overview
API Recipes
Create a Netography API Key
Authentication
Analytics
Raw Records - Search
- Field Valuesget
- Search Recordspost
Raw Records - Fetch
- Fetch Recordget
Block List
- Clear the Block Listdelete
Intelligence
Labels - IPs
Labels - Ports
Configuration
- Netography AWS Custom Trust Policyget
Detect and Respond - Detection Categories
Detect and Respond - Traffic Detection Models
Detect and Respond - Context Creation Models
Detect and Respond - Response Policies
Detect and Respond - Threshold Overrides
Traffic Sources - Devices
Traffic Sources - DNS Devices
Traffic Sources - VPCs
Integrations - Context
Integrations - Response
Tags
Roles
Users
API Keys
Resellers
Settings - Traffic Classification
Settings - Security
- Get Allowed IPsget
- Update Allowed IPsput
Auto Thresholds
MITRE ATT&CK
- List MITRE tacticsget
- List MITRE techniques for a given tacticget

Get all threshold automaton configs

get https://api.netography.com/api/v1/thresholder/automaton

Returns all auto-threshold automaton configs configured for all DMs in a given customer.

time	status	user agent
Retrieving recent requests…

Loading…

URL Expired

The URL for this request expired after 30 days.

Responses

Response body

object

meta

object

code

int32

API response code. 200 ok, 400 you did something wrong. 500 we did something wrong

count

int32

Number of documents retrieved or updated.

data

array of objects

data

object

customer

string

customer shortname

algorithm

string

name of detection model

data_interval

string

defines the how specific a time frame the Threshold override produced by Auto Thresholding applies to.

data_lookback

string

determines how many previous days aggregate data and Auto Thresholding configuration will use to generate Threshold overrides

data_window

string

defines the period of over which values are aggregated for Track By aggregates.

disabled

boolean

disables auto-thresholding for the given automaton

filters

array of strings

filters

force_override

boolean

optional, if set will override the default behavior preventing threshold values below the global average

high_sigma

number

optional, number of standard deviations to use when calculating high-severity thresholds

med_sigma

number

optional, number of standard deviations to use when calculating medium-severity thresholds

low_sigma

number

optional, number of standard deviations to use when calculating low-severity thresholds

strategy

string

used to determine the default threshold, either uses the maximum or average of data values.

thresholds

array of strings

thresholds

track_by

array of strings

values to aggregate data on, should match parent DM track-by fields.

track_by

update_interval

string

Response body

object

status

int32

required

API response code:

4xx - you did something dumb
5xx - we did something dumb

name

string

required

They type of error

message

string

required

description of the error

Response body

object

status

int32

required

API response code:

4xx - you did something dumb
5xx - we did something dumb

name

string

required

They type of error

message

string

required

description of the error

Response body

object

status

int32

required

API response code:

4xx - you did something dumb
5xx - we did something dumb

name

string

required

They type of error

message

string

required

description of the error

Response body

object

status

int32

required

API response code:

4xx - you did something dumb
5xx - we did something dumb

name

string

required

They type of error

message

string

required

description of the error

Updated 6 months ago

Update Allowed IPs

Update threshold automaton config

Did this page help you?

Language

Credentials

Bearer

JWT


xxxxxxxxxx
1
curl --request GET \
2
     --url https://api.netography.com/api/v1/thresholder/automaton

Click Try It! to start a request and see the response here! Or choose an example:

application/json

Updated 6 months ago

Update Allowed IPs

Update threshold automaton config

Did this page help you?

Netography APIs
API Overview
API Recipes
Create a Netography API Key
Authentication
Decoding netosecret
via Refresh Tokenpost
via User Credentialspost
via API Keypost
Analytics
Aggregationspost
Time Seriespost
Metricsget
Aliasesget
Fieldsget
Raw Records - Search
Search Recordspost
Field Valuesget
Raw Records - Fetch
Fetch Recordget
Block List
Clear the Block Listdelete
Intelligence
IP Lookuppost
CVE Lookupget
ASN Lookuppost
Labels - IPs
Upload IP Labelsput
Bulk Delete IP Labelsdelete
Bulk Create/Update IP Labelsput
Delete IP labels by ip:contextdelete
List IP Labels by ip:contextget
List IP Labels by ipget
List IP Labels by contextget
Update IP Labelput
Create IP Labelpost
List IP Labelsget
Labels - Ports
Upload Port Labelsput
Bulk Delete Port Labelsdelete
Bulk Upload Port Labelsput
Reset Port Labelput
Hide Port Labelput
Expose Port Labelput
Delete Port Label by port:protocoldelete
Fetch Port Labelget
List Port Labels by portget
List Port Labels by protocolget
List Configured Protocolsget
Update Port Labelput
Create Port Labelpost
List Port Labelsget
Configuration
Netography AWS Custom Trust Policyget
Detect and Respond - Detection Categories
Delete Detection Modeldelete
Create or Update Detection Categoryput
Fetch Detection Categoryget
Delete All Custom Detection Categoriesdelete
List Detection Categoriesget
Detect and Respond - Traffic Detection Models
Reset Traffic Detection Modelput
Disable Traffic Detection Modelput
Enable Traffic Detection Modelput
Delete Traffic Detection Modeldelete
Update Traffic Detection Modelput
Fetch Traffic Detection Modelget
Create Traffic Detection Modelpost
List Traffic Detection Modelsget
Detect and Respond - Context Creation Models
Reset Context Creation Modelput
Disable Context Creation Modelput
Enable Context Creation Modelput
Delete Context Creation Modeldelete
Update Context Creation Modelput
Fetch Context Creation Modelget
Create Context Creation Modelpost
List Context Creation Modelsget
Detect and Respond - Response Policies
Disable Response Policyput
Enable Response Policyput
Delete Response Policydelete
Update Response Policyput
Fetch Response Policyget
Create Response Policypost
List Response Policiesget
Detect and Respond - Threshold Overrides
Delete Threshold Overrides for Algorithm and Objectdelete
List Threshold Overrides for Algorithm and Objectget
Delete Threshold Overrides for Objectdelete
List Threshold Overrides for Objectget
Delete Threshold Overrides for Algorithmdelete
List Threshold Overrides for Algorithmget
Delete All Threshold Overridesdelete
Create or Update Threshold Overridesput
List Threshold Overridesget
Traffic Sources - Devices
Disable BGP Neighborput
Enable BGP Neighborput
Delete BGP Neighbordelete
Update BGP Neighborput
Get BGP Neighborget
Create BGP Neighborpost
List BGP Neighbors for a Deviceget
Disable DNS Device By IDput
List BGP Neighborsget
Enable DNS Device By IDput
Fetch Device Statusget
Bulk Delete DNS Devicesput
List Device Statusesget
Delete DNS Device By IDdelete
Delete Devicedelete
Update DNS Device By IDput
Update Deviceput
Get DNS Device By IDget
Fetch Deviceget
Add DNS Devicepost
Create Devicepost
Get All DNS Devicesget
List Devicesget
Traffic Sources - DNS Devices
Traffic Sources - VPCs
Get VPC regions by flowtypeget
List VPC Regionsget
Fetch VPC Statusget
List VPC Statusesget
Disable VPCput
Enable VPCput
Delete VPCdelete
Update VPCput
Get VPCget
Create VPCpost
List All VPCsget
Integrations - Context
Regenerate private/public keys.put
Run a Context Integrationput
Dry Run/Test a Context Integrationget
Delete Context Integrationdelete
Update Context Integrationput
Fetch Context Integrationget
Create Context Integrationpost
List Context Integrationsget
Integrations - Response
Delete Response Integrationdelete
Update Response Integrationput
Fetch Response Integrationget
Test a Response Integration Configurationpost
Create Response Integrationpost
List Response Integrationsget
Tags
Delete Flow Tagdelete
Update Flow Tagput
Get Flow Tagget
Create Flow Tagpost
List Tags by Entity Typeget
List Tagsget
Roles
Delete Roledelete
Update Roleput
Get Roleget
Create Rolepost
List Rolesget
List Role Permissionsget
Users
Delete Userdelete
Update Userput
Get Userget
Create Userpost
List Usersget
API Keys
Update API Keyput
Delete API Keydelete
Update API Keyput
Get API Keyget
Create API Keypost
List API Keysget
Resellers
Delete Accountdelete
Update Accountput
Get Accountget
Create Accountpost
List Accountsget
List Account Typesget
Settings - Traffic Classification
Delete DNS Classificationdelete
Update DNS Classificationput
Get DNS Classificationget
List DNS Classificationsget
Delete Network Classificationdelete
Update Network Classificationput
Get Network Classificationget
List Network Classificationsget
Settings - Security
Update Allowed IPsput
Get Allowed IPsget
Auto Thresholds
Get track valuesget
Update threshold automaton config specific valuepatch
Delete automaton configdelete
Get threshold automaton configget
Update threshold automaton configpost
Get all threshold automaton configsget
MITRE ATT&CK
List MITRE techniques for a given tacticget
List MITRE tacticsget

Netography APIs
API Overview
API Recipes
Create a Netography API Key
Authentication
Decoding netosecret
via Refresh Tokenpost
via User Credentialspost
via API Keypost
Analytics
Aggregationspost
Time Seriespost
Metricsget
Aliasesget
Fieldsget
Raw Records - Search
Search Recordspost
Field Valuesget
Raw Records - Fetch
Fetch Recordget
Block List
Clear the Block Listdelete
Intelligence
IP Lookuppost
CVE Lookupget
ASN Lookuppost
Labels - IPs
Upload IP Labelsput
Bulk Delete IP Labelsdelete
Bulk Create/Update IP Labelsput
Delete IP labels by ip:contextdelete
List IP Labels by ip:contextget
List IP Labels by ipget
List IP Labels by contextget
Update IP Labelput
Create IP Labelpost
List IP Labelsget
Labels - Ports
Upload Port Labelsput
Bulk Delete Port Labelsdelete
Bulk Upload Port Labelsput
Reset Port Labelput
Hide Port Labelput
Expose Port Labelput
Delete Port Label by port:protocoldelete
Fetch Port Labelget
List Port Labels by portget
List Port Labels by protocolget
List Configured Protocolsget
Update Port Labelput
Create Port Labelpost
List Port Labelsget
Configuration
Netography AWS Custom Trust Policyget
Detect and Respond - Detection Categories
Delete Detection Modeldelete
Create or Update Detection Categoryput
Fetch Detection Categoryget
Delete All Custom Detection Categoriesdelete
List Detection Categoriesget
Detect and Respond - Traffic Detection Models
Reset Traffic Detection Modelput
Disable Traffic Detection Modelput
Enable Traffic Detection Modelput
Delete Traffic Detection Modeldelete
Update Traffic Detection Modelput
Fetch Traffic Detection Modelget
Create Traffic Detection Modelpost
List Traffic Detection Modelsget
Detect and Respond - Context Creation Models
Reset Context Creation Modelput
Disable Context Creation Modelput
Enable Context Creation Modelput
Delete Context Creation Modeldelete
Update Context Creation Modelput
Fetch Context Creation Modelget
Create Context Creation Modelpost
List Context Creation Modelsget
Detect and Respond - Response Policies
Disable Response Policyput
Enable Response Policyput
Delete Response Policydelete
Update Response Policyput
Fetch Response Policyget
Create Response Policypost
List Response Policiesget
Detect and Respond - Threshold Overrides
Delete Threshold Overrides for Algorithm and Objectdelete
List Threshold Overrides for Algorithm and Objectget
Delete Threshold Overrides for Objectdelete
List Threshold Overrides for Objectget
Delete Threshold Overrides for Algorithmdelete
List Threshold Overrides for Algorithmget
Delete All Threshold Overridesdelete
Create or Update Threshold Overridesput
List Threshold Overridesget
Traffic Sources - Devices
Disable BGP Neighborput
Enable BGP Neighborput
Delete BGP Neighbordelete
Update BGP Neighborput
Get BGP Neighborget
Create BGP Neighborpost
List BGP Neighbors for a Deviceget
Disable DNS Device By IDput
List BGP Neighborsget
Enable DNS Device By IDput
Fetch Device Statusget
Bulk Delete DNS Devicesput
List Device Statusesget
Delete DNS Device By IDdelete
Delete Devicedelete
Update DNS Device By IDput
Update Deviceput
Get DNS Device By IDget
Fetch Deviceget
Add DNS Devicepost
Create Devicepost
Get All DNS Devicesget
List Devicesget
Traffic Sources - DNS Devices
Traffic Sources - VPCs
Get VPC regions by flowtypeget
List VPC Regionsget
Fetch VPC Statusget
List VPC Statusesget
Disable VPCput
Enable VPCput
Delete VPCdelete
Update VPCput
Get VPCget
Create VPCpost
List All VPCsget
Integrations - Context
Regenerate private/public keys.put
Run a Context Integrationput
Dry Run/Test a Context Integrationget
Delete Context Integrationdelete
Update Context Integrationput
Fetch Context Integrationget
Create Context Integrationpost
List Context Integrationsget
Integrations - Response
Delete Response Integrationdelete
Update Response Integrationput
Fetch Response Integrationget
Test a Response Integration Configurationpost
Create Response Integrationpost
List Response Integrationsget
Tags
Delete Flow Tagdelete
Update Flow Tagput
Get Flow Tagget
Create Flow Tagpost
List Tags by Entity Typeget
List Tagsget
Roles
Delete Roledelete
Update Roleput
Get Roleget
Create Rolepost
List Rolesget
List Role Permissionsget
Users
Delete Userdelete
Update Userput
Get Userget
Create Userpost
List Usersget
API Keys
Update API Keyput
Delete API Keydelete
Update API Keyput
Get API Keyget
Create API Keypost
List API Keysget
Resellers
Delete Accountdelete
Update Accountput
Get Accountget
Create Accountpost
List Accountsget
List Account Typesget
Settings - Traffic Classification
Delete DNS Classificationdelete
Update DNS Classificationput
Get DNS Classificationget
List DNS Classificationsget
Delete Network Classificationdelete
Update Network Classificationput
Get Network Classificationget
List Network Classificationsget
Settings - Security
Update Allowed IPsput
Get Allowed IPsget
Auto Thresholds
Get track valuesget
Update threshold automaton config specific valuepatch
Delete automaton configdelete
Get threshold automaton configget
Update threshold automaton configpost
Get all threshold automaton configsget
MITRE ATT&CK
List MITRE techniques for a given tacticget
List MITRE tacticsget

200List of threshold automaton configs for a customer

400Bad Request. Typically due to a malformatted JSON body, or parameter values are not validating.

401Access token is missing or invalid

403Access is forbidden

defaultUnknown Error Occurred