日志检索

简要描述

• 日志检索

请求URL

• http://xx.com/search/

请求方式

• GET

参数

参数名	必选	类型	说明
dtype	是	string	日志类型
stime	是	string	起始时间例2025-01-11T00:00:00.971Z
etime	是	string	结束时间
sip	否	string	源ip检索
dip	否	string	目标ip检索
page	是	string	页码
limit	是	string	条数

返回示例

 {
    "data": [
        {
            "_id": "AZRJHDKvaQJO78oCbm29",
            "_index": "original-attack2-2025.01.09",
            "_score": null,
            "_source": {
                "@timestamp": "2025-01-09T03:29:32.131Z",
                "@version": "1",
                "Action": "PERMIT",
                "Content": "POLICY*: The packet was through because the firewall policy is permit",
                "DIP": "10.21.4.1",
                "DstIP": "10.21.4.1",
                "FwPolicyID": "1",
                "GenTime": "2025-01-09 11:28:14",
                "InInterface": "ge0/0",
                "OutInterface": "ge0/1",
                "Protocol": "ICMP",
                "SIP": "10.21.4.206",
                "SerialNum": "101Y3-15A5O-1F001-1F223-YLS1K",
                "SrcIP": "10.21.4.206",
                "code": "0",
                "geoip": {},
                "host": "10.21.4.161",
                "logsource": "host",
                "program": "FILTER",
                "severity": "6",
                "severity_label": "info",
                "tags": [
                    "_geoip_lookup_failure"
                ],
                "timestamp": "Jan  9 11:28:14",
                "type": "8"
            },
            "_type": "8",
            "sort": [
                1736393372131
            ]
        }
    ],
    "limit": "1",
    "page": "1",
    "total": 54
}

返回参数说明

参数名	类型	说明
groupid	int	用户组id，1：超级管理员；2：普通用户

备注

• 更多返回错误代码请看首页的错误代码描述