SitesClientsWan

searchSiteWanClientEvents

GET
/api/v1/sites/{site_id}/wan_clients/events/search

Search WAN client events for a site with filters for client identity, manufacturer, NAC rule, event type, and time range. Use Search Org WAN Client Events to search WAN client events across the organization.

Authorization

Authorization<token>

Preferred authentication method for automation and integrations. Send the API token in the HTTP Authorization header.

Format: Authorization: Token {apitoken}

Notes:

  • An API token generated for a specific admin has the same privileges as that admin
  • An API token is automatically removed if it is not used for more than 90 days
  • SSO admins cannot generate admin API tokens. Use organization API tokens when scoped Org/Site privileges are needed.

In: header

Path Parameters

site_id*string
Formatuuid

Query Parameters

type?string
mac?string

Partial / full Client MAC address. Use prefix* for prefix search or *substring* for contains search (e.g. aabbcc* and *bbcc* match aabbccddeeff). Suffix-only wildcards (e.g. *bccddeeff) are not supported

hostname?string

Partial / full Client hostname. Use prefix* for prefix search or *substring* for contains search (e.g. everest* and *rest* match my-everest-client). Suffix-only wildcards (e.g. *everest) are not supported

ip?string

Filter results by IP address

mfg?string

Filter results by manufacturer

nacrule_id?string

Filter results by NAC rule identifier

limit?integer

Maximum number of results to return per page

Range0 <= value
Default100
start?string

Lower bound of the time range, as an epoch timestamp in seconds or a relative value such as -1d or -1w

end?string

Upper bound of the time range, as an epoch timestamp in seconds or a relative value such as -1d, -2h, or now

duration?string

Time range duration for the query, using relative units such as 10m, 7d, or 2w

Default"1d"
sort?string

On which field the list should be sorted, -prefix represents DESC order

Default"timestamp"
search_after?string

Pagination cursor for retrieving subsequent pages of results. This value is automatically populated by Mist in the next URL from the previous response and should not be manually constructed.

Response Body

curl -X GET "https://example.com/api/v1/sites/000000ab-00ab-00ab-00ab-0000000000ab/wan_clients/events/search"
{  "end": 0,  "limit": 0,  "results": [    {      "When": "2022-12-31 23:59:59.293000+00:00",      "ev_type": "CLIENT_IP_ASSIGNED",      "metadata": {},      "org_id": "b0b9f142-aaba-11e6-aafc-0242ac110002",      "random_mac": true,      "site_id": "fc656275-b157-43fd-b922-5f4f341c19bf",      "text": "DHCP Ack IP 192.168.88.216",      "wcid": "62bbfb75-10d8-49d1-dec7-d2df91624287"    }  ],  "start": 0,  "total": 0}