OrgsClientsWireless

searchOrgWirelessClientEvents

GET
/api/v1/orgs/{org_id}/clients/events/search

Search wireless client event records across the organization with filters for event type, reason code, SSID, AP, key management, protocol, band, WLAN, NAC rule, and time range.

Authorization

Authorization<token>

Preferred authentication method for automation and integrations. Send the API token in the HTTP Authorization header.

Format: Authorization: Token {apitoken}

Notes:

  • An API token generated for a specific admin has the same privileges as that admin
  • An API token is automatically removed if it is not used for more than 90 days
  • SSO admins cannot generate admin API tokens. Use organization API tokens when scoped Org/Site privileges are needed.

In: header

Path Parameters

org_id*string
Formatuuid

Query Parameters

type?string

See List Device Events Definitions. Accepts multiple comma-separated values.

reason_code?string

Reason code filter for association and disassociation events. Accepts multiple comma-separated integer values.

ssid?string

Filter results by SSID. Accepts multiple comma-separated values.

ap?string

Filter results by AP MAC address. Accepts multiple comma-separated values.

key_mgmt?string

Key management protocol used to filter client events. enum: WPA2-PSK, WPA2-PSK/CCMP, WPA2-PSK-FT, WPA2-PSK-SHA256, WPA3-EAP-SHA256, WPA3-EAP-SHA256/CCMP, WPA3-EAP-FT/GCMP256, WPA3-SAE-FT, WPA3-SAE-PSK. Accepts multiple comma-separated values.

proto?string

802.11 protocol used to filter results. enum: a, ac, ax, b, be, g, n. Accepts multiple comma-separated values.

band?string

802.11 band used to filter radio results. enum: 24, 5, 5-dedicated, 5-selectable, 6, 6-dedicated, 6-selectable. Accepts multiple comma-separated values.

wlan_id?string

Filter results by WLAN identifier

Formatuuid
nacrule_id?string

Filter results by NAC rule identifier. Accepts multiple comma-separated values.

Formatuuid
start?string

Lower bound of the time range, as an epoch timestamp in seconds or a relative value such as -1d or -1w

end?string

Upper bound of the time range, as an epoch timestamp in seconds or a relative value such as -1d, -2h, or now

duration?string

Time range duration for the query, using relative units such as 10m, 7d, or 2w

Default"1d"
sort?string

On which field the list should be sorted, -prefix represents DESC order

Default"timestamp"
limit?integer

Maximum number of results to return per page

Range0 <= value
Default100
search_after?string

Pagination cursor for retrieving subsequent pages of results. This value is automatically populated by Mist in the next URL from the previous response and should not be manually constructed.

Response Body

curl -X GET "https://example.com/api/v1/orgs/000000ab-00ab-00ab-00ab-0000000000ab/clients/events/search?key_mgmt=WPA2-PSK%2CWPA2-PSK%2FCCMP&proto=ax%2Cac&band=6%2C5"
{  "end": 0,  "limit": 0,  "results": [    {      "ap": "string",      "band": "24",      "bssid": "string",      "channel": 0,      "proto": "a",      "ssid": "string",      "text": "string",      "timestamp": 0,      "type": "string",      "type_code": 0,      "wlan_id": "b069b358-4c97-5319-1f8c-7c5ca64d6ab1"    }  ],  "start": 0,  "total": 0}