1. Interface Description
Interface request domain name: cwp.api3.convergecloud.com.
API for querying security event statistics
Default interface request rate limit: 20 times per second.
Interface update time: 2022-11-08 16:30:42.
The interface is both signature verification and authentication.
2. Input Parameters
The following list of request parameters only lists interface request parameters and some public parameters, For a complete list of public parameters see public request parameters.
| Parameter name | Required | Allow NULL | Type | Description |
|---|---|---|---|---|
| Action | Yes | No | String | Public parameter, The value of this interface: DescribeSecurityEventStat |
| Version | Yes | No | String | Public parameter, The value of this interface: 2018-02-28 |
| Region | No | No | String | Public parameter,Regional information This interface does not need to pass this parameter. |
| Filters | No | No | Array of Filter | This API does not support filter conditions. Example:View |
3. Output Parameters
| Parameter name | Type | Description |
|---|---|---|
| AttackLogsStat | EventStat | Statistics about cyberattack events. Example:View |
| BaseLineTotalAffectNum | Uint64 | Total number of servers on which pending baseline security events exist. Example: 1 |
| BaselineHighStat | EventStat | Statistics about high-risk baseline vulnerability events. Example:View |
| BaselineLowStat | EventStat | Statistics about low-risk baseline vulnerability events. Example:View |
| BaselineNormalStat | EventStat | Statistics about medium-risk baseline vulnerability events. Example:View |
| BaselineRiskStat | EventStat | Statistics about critical baseline vulnerability events. Example:View |
| BruteAttackStat | EventStat | Statistics about brute force attacks. Example:View |
| CyberAttackTotalAffectNum | Uint64 | Total number of servers on which pending cyberattack events exist. Example: 1 |
| HighRiskBashStat | EventStat | Statistics about high-risk command events. Example:View |
| HostLoginStat | EventStat | Statistics about logins from unusual locations. Example:View |
| InvasionTotalAffectNum | Uint64 | Total number of servers on which pending intrusion events exist. Example: 1 |
| MachineTotalAffectNum | Uint64 | Total number of servers on which pending security events exist. Example: 1 |
| MaliciousRequestStat | EventStat | Statistics about malicious request events. Example:View |
| MalwareStat | EventStat | Statistics about trojan events. Example:View |
| PrivilegeStat | EventStat | Statistics about local privilege escalation events. Example:View |
| ReverseShellStat | EventStat | Statistics about reverse shell events. Example:View |
| Score | Uint64 | Security score. Example: 20 |
| VulHighStat | EventStat | Statistics about high-risk vulnerability events. Example:View |
| VulLowStat | EventStat | Statistics about low-risk vulnerability events. Example:View |
| VulNormalStat | EventStat | Statistics about medium-risk vulnerability events. Example:View |
| VulRiskStat | EventStat | Statistics about critical vulnerability events. Example:View |
| VulStat | EventStat | Vulnerability count statistics. Example:View |
| VulTotalAffectNum | Uint64 | Total number of servers on which pending vulnerability events exist. Example: 1 |
| RequestId | String | Unique request id, Each request will return. The RequestId of the request needs to be provided when locating the problem. |
4. Error Code
The following lists only the error codes related to the interface business logic, For other error codes, see public ErrorCode.
| Error Code | Description |
|---|---|
| InternalError | Internal error. |
| ResourceNotFound | The resource does not exist. |