The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Get number of assets for all categories

Prev Next

Get number of assets for all categories : pass start time as a query parameter

To list all NDR appliance categories, send the following request:

GET https://<IA_IP_address>/config/v1/cad?stime&etime

Required header:

--user <username>:<password>
  • IA_IP_address—IP address of the NDR appliance running the NDR API.

  • username— Administrator username.

  • password—Administrator password.

Example

GET https://xxx.xxx.xxx.xxx/config/v1/cad?stime&etime

Required header:

--user <username>:<password>

Response

HTTP/1.1 [Response Code] [Response Message]
Date: [Date]
Content-Type: [Content Type] 
Category: "Database", "others", "Printer"
Count: 1,2

Response fields

  • Response Code—A standard HTTP response code.

  • Response Message—A standard HTTP response message.

  • Date—Standard HTML date format.

  • Content Type—The response format.

  • Category—The category of the appliance.

  • Count—The number of appliance.

Example
curl localhost:8085/config/v1/cad?stime=1700747822&etime=1716482820
[
{
"category": "Database",
"count": 1
},
{
"category": "Other",
"count": 2
},
{
"category": "Printer",
"count": 1
}
]

cURL code sample

curl -k --user npadmin:hammerhead https://xxx.xxx.xxx.xxx/config/v1/cad?stime&etime -X GET

This cURL sample includes the following options:

  • -k—This option explicitly allows cURL to perform insecure SSL connections and transfers, which allows you to test your SSL connection without installing a CA certificate.

  • --user npadmin:hammerhead—Replace npadmin with your user name. Replace hammerhead with your password.

  • https://xxx.xxx.xxx.xxx/config/v1/cad?stime—The users request URL. Replace xxx.xxx.xxx.xxx with the IP address of your NDR appliance.

  • -X GET—This option specifies using the GET method.

Results

This example returns a list of all NDR appliance categories. The output is in JSON format.

To list all NDR appliance categories, send the following request:

GET https://<IA_IP_address>/config/v1/cad/category?stime=1701770377&etime=1716482820&category=Other

Required header:

--user <username>:<password>
  • IA_IP_address—IP address of the NDR appliance running the NDR API.

  • username— Administrator username.

  • password—Administrator password.

Example

GET https://xxx.xxx.xxx.xxx/config/v1/cad/category?stime=1701770377&etime=1716482820&category=Other

Required header:

--user <username>:<password>

Response

HTTP/1.1 [Response Code] [Response Message]
Date: [Date]
Content-Type: [Content Type] 
Category: "Database", "others", "Printer"
Count: 1,2 

Response fields

  • Response Code—A standard HTTP response code.

  • Response Message—A standard HTTP response message.

  • Date—Standard HTML date format.

  • Content Type—The response format.

  • Category—The category of the appliance.

  • Count—The number of appliance.

Example
curl localhost:8085/config/v1/cad/category?stime=1701770377&etime=1716482820&category=Other
[
{
"asset-ip": "255.255.255.255",
"hostname": "",
"os": "",
"mac": "",
"category": "Other",
"status": "PotentialCritical",
"src-ports": [],
"dest-ports": [
"67"
],
"protocols": [
"UDP"
],
"services": [
"bootps"
],
"clients": [
"0.0.0.0",
"10.128.39.98"
],
"targets": [],
"event-types": [
"flow",
"pxflow"
],
"user-agents": [],
"firstseen": "1700727336",
"lastseen": "1701770857",
"flows-in": 2192,
"flows-out": 0,
"bytes-in": 5546,
"bytes-out": 13833000,
"events-in": 0,
"events-out": 0
}
][
{
"category": "Database",
"count": 1
},
{
"category": "Other",
"count": 2
},
{
"category": "Printer",
"count": 1
}
]

cURL code sample

curl -k --user npadmin:hammerhead https://xxx.xxx.xxx.xxx/config/v1/cad/category?stime=1701770377&etime=1716482820&category=Other -X GET

This cURL sample includes the following options:

  • -k—This option explicitly allows cURL to perform insecure SSL connections and transfers, which allows you to test your SSL connection without installing a CA certificate.

  • --user npadmin:hammerhead—Replace npadmin with your user name. Replace hammerhead with your password.

  • https://xxx.xxx.xxx.xxx/config/v1/cad?stime—The users request URL. Replace xxx.xxx.xxx.xxx with the IP address of your NDR appliance.

  • -X GET—This option specifies using the GET method.

Results

This example returns a list of all NDR appliance categories. The output is in JSON format.

To list all NDR appliance categories, send the following request:

GET https://<IA_IP_address>/config/v1/cad/category?stime=17017703&etime=1716482820&category=Database,Other"

Required header:

--user <username>:<password>
  • IA_IP_address—IP address of the NDR appliance running the NDR API.

  • username— Administrator username.

  • password—Administrator password.

Example

GET https://xxx.xxx.xxx.xxx/config/v1/cad/category?stime=17017703&etime=1716482820&category=Database,Other"

Required header:

--user <username>:<password>

Response

HTTP/1.1 [Response Code] [Response Message]
Date: [Date]
Content-Type: [Content Type] Category: "Database", "others", "Printer"
Count: 1,2 

Response fields

  • Response Code—A standard HTTP response code.

  • Response Message—A standard HTTP response message.

  • Date—Standard HTML date format.

  • Content Type—The response format.

  • Category—The category of the appliance.

  • Count—The number of appliance.

Example
curl "localhost:8085/config/v1/cad/category?stime=17017703&etime=1716482820&category=Database,Other"
[
{
"asset-ip": "10.128.15.13",
"hostname": "fenet1.eng.fireeye.com1",
"os": "",
"mac": "",
"category": "Database",
"status": "",
"src-ports": [],
"dest-ports": [
"53"
],
"protocols": [
"UDP"
],
"services": [
"dns"
],
"clients": [
"10.128.36.145",
"10.128.36.62",
"10.128.36.238",
"10.128.37.140",
"10.128.37.112",
"10.128.37.244",
"10.128.36.84"
],
"targets": [],
"event-types": [
"dns"
],
"user-agents": [],
"firstseen": "1700727180",
"lastseen": "1700749211",
"flows-in": 0,
"flows-out": 0,
"bytes-in": 0,
"bytes-out": 0,
"events-in": 11322,
"events-out": 0
},
{
"asset-ip": "255.255.255.255",
"hostname": "",
"os": "",
"mac": "",
"category": "Other",
"status": "PotentialCritical",
"src-ports": [],
"dest-ports": [
"67"
],
"protocols": [
"UDP"
],
"services": [
"bootps"
],
"clients": [
"0.0.0.0",
"10.128.39.98"
],
"targets": [],
"event-types": [
"flow",
"pxflow"
],
"user-agents": [],
"firstseen": "1700727336",
"lastseen": "1701771336",
"flows-in": 2193,
"flows-out": 0,
"bytes-in": 5546,
"bytes-out": 13839360,
"events-in": 0,
"events-out": 0
}

cURL code sample

curl -k --user npadmin:hammerhead https://xxx.xxx.xxx.xxx/config/v1/category?stime=1701770377&etime=1716482820&category=Other -X GET

This cURL sample includes the following options:

  • -k—This option explicitly allows cURL to perform insecure SSL connections and transfers, which allows you to test your SSL connection without installing a CA certificate.

  • --user npadmin:hammerhead—Replace npadmin with your user name. Replace hammerhead with your password.

  • https://xxx.xxx.xxx.xxx/config/v1/cad?stime—The users request URL. Replace xxx.xxx.xxx.xxx with the IP address of your NDR appliance.

  • -X GET—This option specifies using the GET method.

Results

This example returns all NDR appliance categories. The output is in JSON format.