Skip to content
API Enriched

List of events.

POST
/api/infraprotect/namespaces/{namespace}/infraprotect/events
curl --request POST \
  --url https://example-corp.console.ves.volterra.io/api/v1/api/production/us-east-1/namespaces/default/api/infraprotect/namespaces/example/infraprotect/events \
  --header 'Authorization: <Authorization>' \
  --header 'Content-Type: application/json' \
  --data '{ "end_time": "2026-04-15T12:00:00Z", "mitigation_id": "example", "namespace": "example", "network_id": "example", "start_time": "2026-04-15T12:00:00Z" }'

Returns a list of events. Events are created when a high priority mitigation is started. Events then serve as a one stop shop to review activities to mitigate a DDoS attack.

Examples of this operation.

Authorizations

Section titled “Authorizations”

Parameters

Section titled “Parameters”

Path Parameters

Section titled “Path Parameters”
namespace
required
string

Namespace This request is supported only in system namespace.

Request Bodyrequired

Section titled “Request Bodyrequired”
Media typeapplication/json
List of events request

Request to GET a list of events.

object
end_time
End time

End time of metric collection from which data will be considered to build graph. Format: RFC3339

Optional: If not specified, then the end_time will be evaluated to

string format: date-time
<= 1024 characters
mitigation_id
Mitigation

Filter events by mitigation

Optional: If not specified, then events are returned regardless of mitigation.

string
<= 1024 characters
namespace
Namespace

This request is supported only in system namespace.

string
>= 6 characters <= 1024 characters
network_id
Network

Filter events by network

Optional: If not specified, then all tenant’s networks are considerate.

string
<= 1024 characters
start_time
Start time

Start time of metric collection from which data will be considered to build graph. Format: RFC3339

Optional: If not specified, then the start_time will be evaluated to -3d.

string format: date-time
<= 1024 characters
Examplegenerated
{
  "end_time": "2026-04-15T12:00:00Z",
  "mitigation_id": "example",
  "namespace": "example",
  "network_id": "example",
  "start_time": "2026-04-15T12:00:00Z"
}

Responses

Section titled “Responses”

200

Section titled “200”

A successful response.

Media typeapplication/json
List of events response

Response to GET a list of events.

object
events
Events

Recorder events filtered by events requests.

Array<object>
Single instance of an event

Event (an attack record) that holds info an attack and its mitigation(s)

object
attachments
Attachments

Attachments on an event.

Array<object>
Event attachment

Event attachment record (pcap, or any arbitrary file)

object
attachment_id
Attachment ID

ID of the attachment.

string
<= 1024 characters
attachment_type
string
default: ATTACHMENT_TYPE_UNKNOWN
Allowed values: ATTACHMENT_TYPE_UNKNOWN ATTACHMENT_TYPE_PCAP ATTACHMENT_TYPE_BINARY ATTACHMENT_TYPE_INVALID_PCAP ATTACHMENT_TYPE_OTHER
end_time
End time

End time as an RFC3339 string.

string format: date-time
<= 1024 characters
gos_name
GOS name

Generic object storage name of the attachment.

string
<= 1024 characters
gos_version
GOS version

Generic object storage version of the attachment.

string
<= 1024 characters
name
Name

Name of the attachment.

string
>= 6 characters <= 1024 characters
size_bytes
Size

Size of the attachment.

string format: int64
<= 1024 characters
start_time
Start time

Start time as an RFC3339 string.

string format: date-time
<= 1024 characters
creator
Creator

Creator of the event.

string
<= 1024 characters
description
Description

More detailed description of the event. Most of the time list of actions taken.

string
>= 21 characters <= 1024 characters
end_time
End time

End time as an RFC3339 string.

string format: date-time
<= 1024 characters
has_attachment
Has attachment

True if event has any attachment other than PCAP files.

boolean format: boolean
has_details
Has details

True if the event already has details assigned, otherwise false.

boolean format: boolean
id
Id

ID of the event used to uniquely identify it.

string
>= 1 <= 4094 <= 1024 characters
ip
IP

Target IP

string
<= 1024 characters
mitigation_id
Mitigation ID

Mitigation the event is related to.

string
<= 1024 characters
name
Name

Name of an event.

string
>= 6 characters <= 1024 characters
network_id
Network ID

Network the event is related to.

string
<= 1024 characters
start_time
Start time

Start time as an RFC3339 string.

string format: date-time
<= 1024 characters
Example
{
  "events": [
    {
      "attachments": [
        {
          "attachment_type": "ATTACHMENT_TYPE_UNKNOWN"
        }
      ]
    }
  ]
}

401

Section titled “401”

Returned when operation is not authorized.

Media typeapplication/json
string format: string
Examplegenerated
example

403

Section titled “403”

Returned when there is no permission to access resource.

Media typeapplication/json
string format: string
Examplegenerated
example

404

Section titled “404”

Returned when resource is not found.

Media typeapplication/json
string format: string
Examplegenerated
example

409

Section titled “409”

Returned when operation on resource is conflicting with current value.

Media typeapplication/json
string format: string
Examplegenerated
example

429

Section titled “429”

Returned when operation has been rejected as it is happening too frequently.

Media typeapplication/json
string format: string
Examplegenerated
example

500

Section titled “500”

Returned when server encountered an error in processing API.

Media typeapplication/json
string format: string
Examplegenerated
example

503

Section titled “503”

Returned when service is unavailable temporarily.

Media typeapplication/json
string format: string
Examplegenerated
example

504

Section titled “504”

Returned when server timed out processing request.

Media typeapplication/json
string format: string
Examplegenerated
example