swagger: '2.0'
info:
  description: Configuration for AF Threat Data Report table resource.
  version: 'v2'
  title: si_app_summary
host: 'adm.cloud.com'
schemes:
 - https
# tags are used for organizing operations
tags:
  - name: si_app_summary
    description: AF Threat Data Report table
consumes:
  - application/json
produces:
  - application/json
securityDefinitions:
  UserSecurity:
    type: basic
security:
  - UserSecurity: []
parameters:
  authParam:
      in: header
      name: Authorization
      type: string
      required: true
      description: Session Id for authentication.Should be mentioned in the format CwsAuth bearer=sessionIdValue
  cloudParam:
      in: header
      name: isCloud
      type: string
      required: true
      description: set the value to true in case of Cloud services, false for on-prem deployment
paths:
  /massvc/{customerid}/nitro/v2/config/si_app_summary:
    get:
      tags:
        - si_app_summary
      summary: GET all si_app_summary
      operationId: getall_si_app_summary
      description: Af Report for Security Insight Device.
      consumes:
        - application/json
      produces:
        - application/json
      parameters:
        - in: path
          name: customerid
          type: string
          required: true
          description: Customer Id of the user
        - in: header
          name: Authorization
          type: string
          required: true
          description: Session Id for authentication.Should be mentioned in the format CwsAuth bearer=sessionIdValue
        - in: header
          name: isCloud
          type: string
          required: true
          description: set the value to true in case of Cloud services, false for on-prem deployment
        - in: query
          name: filter
          type: string
          required: false
          description: "Use this query-parameter to get the filtered set of vm_device resources configured on the system. You can set a filter on any property of the resource.Example:  property-name1:property-value1 "
        - in: query
          name: args
          type: string
          required: false
          description: "Use this query-parameter to specify arguments.Example:  property-name1:property-value1 "
        - in: query
          name: duration
          type: string
          required: true
          description: "Duration "
          enum:
            - last_1_hour
            - last_1_day
            - last_1_week
            - last_1_month
        - in: query
          name: cr_enabled
          type: string
          required: false
          description: Use this query-parameter to indicate cr is enabled or not
          enum:
            - 0
            - 1
        - in: query
          name: report_start_time
          type: string
          required: false
          description: Use this query-parameter to specify the start time from which the summary for report is considered
        - in: query
          name: report_end_time
          type: string
          required: false
          description: Use this query-parameter to specify the end time until where summary for report is considered
        - in: query
          name: asc
          type: string
          required: false
          description: Use this query-parameter to specify whether the results should be in ascending order or not
          enum:
            - yes
            - no
        - in: query
          name: sla_enabled
          type: string
          required: false
          description: Use this query-parameter to indicate sla is enabled or not
          enum:
            - 0
            - 1
        - in: query
          name: order_by
          type: string
          required: false
          description: Use this query-parameter to get the result that is ordered by the given property
          enum:
            - total_attacks
        - in: query
          name: type
          type: string
          required: false
          description: Use this query-parameter to specify the type
          enum:
            - total_attacks
        - in: query
          name: pagesize
          type: integer
          required: false
          description: Use this query-parameter to get the si_app_summary resources in chunks.To be used along with pageno query parameter.
        - in: query
          name: pageno
          type: integer
          required: false
          description: Use this query-parameter to get the si_app_summary resources in chunks.To be used along with pagesize query parameter.
        - in: query
          name: count
          type: string
          required: false
          description: Use this query-parameter to get the count of si_app_summary resources.
          enum:
            - yes
      responses:
        200:
          description:  for si_app_summary
          schema: 
              $ref: '#/definitions/getsi_app_summarysResponse'
        400:
          description: Bad input parameter
          schema: 
              $ref: '#/definitions/Error'
        401:
          description: Failed Authentication
          schema: 
              $ref: '#/definitions/Error'
        403:
          description: Unauthorized
          schema: 
              $ref: '#/definitions/Error'
        404:
          description: Item not found
          schema: 
              $ref: '#/definitions/Error'
        409:
          description: Resource Conflict
          schema: 
              $ref: '#/definitions/Error'
        500:
          description: Server Error
          schema: 
              $ref: '#/definitions/Error'
        504:
          description: Gateway Timeout
          schema: 
              $ref: '#/definitions/Error'

definitions:
  getsi_app_summaryResponse:
    type: object
    required:
      - si_app_summary
    properties:
      si_app_summary:
        $ref: '#/definitions/si_app_summary'
    title: getsi_app_summaryResponse
    example:
      si_app_summary:
        violation_category: "Start URL, Buffer Overflow Query"
        severity_type: "Medium"
        __count: "1.0"
        country_code: "IN"
        violation_action: "Blocked"
        threat_index: "1.0"
        appfwlogexprvalue: "HTTP.REQ.HEADER(x-forwarded-for)"
        violation_location: "USA"
        id: "c970e730-6bc5-44c2-a2bf-8dd1382ffb5f"
        http_method: "GET"
        violation_value: "Violation Value"
        not_blocked_flags: "1.0"
        appfwlogexprname: "Request_xfrwdfor"
        name: "app_1.1.1.1"
        attack_category: "Broken Authentication and Session Management"
        appfwlogexprcomment: "AppFw Log Expr Comment"
        http_req_url: "www.citrix.com"
        block_flags: "1.0"
        counter_value: "-1"
        violation_type: "1"
        signature_category: "Signature Category"
        city: "Bangalore"
        violation_name: "VName"
        severity: "2"
        source_ip_address: "1.1.1.1"
        attack_time: "1578272446"
        rpt_sample_time: "1580886160"
        violation_threat_index: "4"
        total_attacks: "1.0"
        si_device_ip_address: "1.1.1.1"
        transactionid: "12345"
        transformed_flags: "1.0"
        si_app_unit_name: "app_1.1.1.1"

  getsi_app_summarysResponse:
    type: object
    required:
      - si_app_summary
    properties:
      si_app_summary:
        type: array
        items:
          $ref: '#/definitions/si_app_summary'
    title: getsi_app_summarysResponse
    example:
      si_app_summary:
        violation_category: "Start URL, Buffer Overflow Query"
        severity_type: "Medium"
        __count: "1.0"
        country_code: "IN"
        violation_action: "Blocked"
        threat_index: "1.0"
        appfwlogexprvalue: "HTTP.REQ.HEADER(x-forwarded-for)"
        violation_location: "USA"
        id: "c970e730-6bc5-44c2-a2bf-8dd1382ffb5f"
        http_method: "GET"
        violation_value: "Violation Value"
        not_blocked_flags: "1.0"
        appfwlogexprname: "Request_xfrwdfor"
        name: "app_1.1.1.1"
        attack_category: "Broken Authentication and Session Management"
        appfwlogexprcomment: "AppFw Log Expr Comment"
        http_req_url: "www.citrix.com"
        block_flags: "1.0"
        counter_value: "-1"
        violation_type: "1"
        signature_category: "Signature Category"
        city: "Bangalore"
        violation_name: "VName"
        severity: "2"
        source_ip_address: "1.1.1.1"
        attack_time: "1578272446"
        rpt_sample_time: "1580886160"
        violation_threat_index: "4"
        total_attacks: "1.0"
        si_device_ip_address: "1.1.1.1"
        transactionid: "12345"
        transformed_flags: "1.0"
        si_app_unit_name: "app_1.1.1.1"

  si_app_summary_readwrite:
    type: object
    properties:
      violation_category:
        description: "Violation Category"
        type: string
        format: string
      severity_type:
        description: "Severity Type"
        type: string
        format: string
        maxLength: 255
      __count:
        description: "Number of records"
        type: number
        format: double
      country_code:
        description: "Country Code"
        type: string
        format: string
        maxLength: 255
      violation_action:
        description: "Violation Action"
        type: string
        format: string
        maxLength: 255
      threat_index:
        description: "Threat Index"
        type: number
        format: double
      appfwlogexprvalue:
        description: "AppFw Log Expr value"
        type: string
        format: string
        maxLength: 7168
      violation_location:
        description: "Violation Location"
        type: string
        format: string
        maxLength: 255
      http_method:
        description: "http_method"
        type: string
        format: string
        maxLength: 50
      violation_value:
        description: "Violation Value"
        type: string
        format: string
        maxLength: 255
      not_blocked_flags:
        description: "Not Block Flags"
        type: number
        format: double
      appfwlogexprname:
        description: "AppFw Log Expr Name"
        type: string
        format: string
        maxLength: 512
      name:
        description: "AppName"
        type: string
        format: string
        maxLength: 255
      attack_category:
        description: "Attack Category"
        type: string
        format: string
        maxLength: 255
      appfwlogexprcomment:
        description: "AppFw Log Expr Comment"
        type: string
        format: string
        maxLength: 128
      http_req_url:
        description: "HTTP Request URL"
        type: string
        format: string
        maxLength: 2048
      block_flags:
        description: "Block Flags."
        type: number
        format: double
      counter_value:
        description: "Counter Value"
        type: number
        format: string
      violation_type:
        description: "Violation Type"
        type: string
        format: string
        maxLength: 2048
      signature_category:
        description: "Signature Category"
        type: string
        format: string
        maxLength: 255
      city:
        description: "City Name"
        type: string
        format: string
        maxLength: 255
      violation_name:
        description: "Violation  Name"
        type: string
        format: string
        maxLength: 255
      severity:
        description: "severity"
        type: string
        format: string
        maxLength: 255
      source_ip_address:
        description: "Source IP Address"
        type: string
        format: ipaddress
        maxLength: 255
      attack_time:
        description: "Attack Time"
        type: string
        format: string
        maxLength: 255
      rpt_sample_time:
        description: "Report Sample time."
        type: number
        format: int32
      violation_threat_index:
        description: "Violation Threat Index"
        type: string
        format: string
        maxLength: 2048
      total_attacks:
        description: "total attacks."
        type: number
        format: double
      transactionid:
        description: "Transaction ID"
        type: number
        format: int32
      transformed_flags:
        description: "Transformed Flags."
        type: number
        format: double
      si_app_unit_name:
        description: "AppName"
        type: string
        format: string
        maxLength: 255

  si_app_summary:
    allOf:
      -
        properties:
          id:
            description: Id is Security check violation name
            type: string
            format: uuid
      - $ref: '#/definitions/si_app_summary_readwrite'

  Error:
    properties:
      errorcode:
        type: number
        format: int32
        example: 1001
      errormessage:
        type: string
        format: string
        example: "id cannot be found"
