List Events of an Organisation | emnify Documentation

Returns the list of events, filtered, sorted and paged according to query parameters.

The events of the own organisation can also be retrieved with call to /api/v1/organisation/my/event.

CAUTION This API endpoint deviates from the specified conventions and may not return the same HTTP Codes as the higher layer call (/api/v1/organisation/{org_id|my}). In case the requested {org_id} does not exist or is not accessible for the user, HTTP 200 will be returned with empty [] as long as the provided {org_id} is a number and all parameters are valid. Please take that into consideration when building automation on top of the error behaviour of this endpoint.

Returns the list of events, filtered, sorted and paged according to query parameters. The events of the own organisation can also be retrieved with call to /api/v1/organisation/my/event. **CAUTION** This API endpoint deviates from the specified conventions and may not return the same HTTP Codes as the higher layer call (`/api/v1/organisation/{org_id|my}`). In case the requested `{org_id}` does not exist or is not accessible for the user, **HTTP 200** will be returned with empty **[]** as long as the provided `{org_id}` is a number and all parameters are valid. Please take that into consideration when building automation on top of the error behaviour of this endpoint.

Authentication

AuthorizationBearer

An auth_token should be provided to authenticate a session.

To obtain an auth_token, see the POST request to /api/v1/authenticate.

Path parameters

org_iddoubleRequired

Numerical ID of an organization

Query parameters

pageintegerOptional

Current page number

per_pageintegerOptional

Defines the number of items per page

sortstringOptional

Sort properties according to a comma separated list of accepted fields. Valid fields are:

id - (event id)
timestamp - (event timestamp)
source - (event source)
severity - (event severity)
alert - (alert status)
organisation - (organisation name)
user - (user id)
endpoint - (endpoint name)
tags - (endpoint tags)
ip_address - (endpoint ip_address)
iccid - (sim iccid)
imsi - (sim imsi)
type - (event type)

Sort properties according to a comma separated list of accepted fields. Valid fields are: * `id` - (**event id**) * `timestamp` - (**event timestamp**) * `source` - (**event source**) * `severity` - (**event severity**) * `alert` - (**alert status**) * `organisation` - (**organisation name**) * `user` - (**user id**) * `endpoint` - (**endpoint name**) * `tags` - (**endpoint tags**) * `ip_address` - (**endpoint ip_address**) * `iccid` - (**sim iccid**) * `imsi` - (**sim imsi**) * `type` - (**event type**)

qstringOptional

format: "(from|until|type|source|severity|alert|description|organisation|user|endpoint|tags|ip_address|imei|iccid|imsi|timestamp)\:.+"

Filter parameter in <filter>:<value> format. Multiple filters must be a comma-separated list of the following fields:

from (date, format YYYY-MM-DDTHH:mm:ssZ, only valid with until!)
until (date, format YYYY-MM-DDTHH:mm:ssZ, only valid with from!)
type (event_type, numerical)
source (event_type, numerical, e.g. 0 = Network), 1 = Policy Control, 2 = API)
severity (event_severity, numerical, e.g. 0 = Info, 1 = Warn), 2 = Critical)
alert (boolean, e.g. true, false)
description (event description, string)
organisation (organisation name, string)
user (user name, string)
endpoint (endpoint name, string)
tags (endpoint tags, string)
ip_address (endpoint IP address, valid IPv4/IPv6 address)
imei (endpoint imei, numerical string)
iccid (sim iccid, numerical string)
imsi (sim imsi, numerical string)
timestamp (date, format YYYY-MM-DDTHH:mm:ssZ, for querying events of 1 day, deprecated in future)

Filter parameter in `<filter>:<value>` format. Multiple filters must be a comma-separated list of the following fields: * `from` (**date**, format `YYYY-MM-DDTHH:mm:ssZ`, __only valid with until!__) * `until` (**date**, format `YYYY-MM-DDTHH:mm:ssZ`, __only valid with from!__) * `type` (**event_type**, numerical) * `source` (**event_type**, numerical, e.g. 0 = Network), 1 = Policy Control, 2 = API) * `severity` (**event_severity**, numerical, e.g. 0 = Info, 1 = Warn), 2 = Critical) * `alert` (boolean, e.g. true, false) * `description` (**event description**, string) * `organisation` (**organisation name**, string) * `user` (**user name**, string) * `endpoint` (**endpoint name**, string) * `tags` (**endpoint tags**, string) * `ip_address` (**endpoint IP address**, valid IPv4/IPv6 address) * `imei` (**endpoint imei**, numerical string) * `iccid` (**sim iccid**, numerical string) * `imsi` (**sim imsi**, numerical string) * `timestamp` (**date**, format `YYYY-MM-DDTHH:mm:ssZ`, for querying events of 1 day, deprecated in future)

Response headers

linkstring or null

URLs for navigational links used to retrieve first, previous, next and last page in a dataset

x-count-per-pageinteger

The requested per_page parameter

x-current-pageinteger

The current page number within the current data set

x-total-countinteger

The total element count in the current data set

x-total-pagesinteger

The total page count in the current data set

x-filterstring or null

If filtering is applied using ?q=field:criteria URL query parameters, the filter criteria is returned here

x-sortstring or null

If sorting is applied using ?sort=sort_criteria URL query parameters, the sort criteria is returned here

Response

Successfully returned a list of events of an Organization

timestampstring or null

alertboolean or null

descriptionstring or null

idinteger or null

event_typeobject or null

event_sourceobject or null

event_severityobject or null

organisationobject or null

endpointobject or null

simobject or null

imsiobject or null

Errors

Filter parameter in <filter>:<value> format. Multiple filters must be a comma-separated list of the following fields:

from (date, format YYYY-MM-DDTHH:mm:ssZ, only valid with until!)
until (date, format YYYY-MM-DDTHH:mm:ssZ, only valid with from!)
type (event_type, numerical)
source (event_type, numerical, e.g. 0 = Network), 1 = Policy Control, 2 = API)
severity (event_severity, numerical, e.g. 0 = Info, 1 = Warn), 2 = Critical)
alert (boolean, e.g. true, false)
description (event description, string)
organisation (organisation name, string)
user (user name, string)
endpoint (endpoint name, string)
tags (endpoint tags, string)
ip_address (endpoint IP address, valid IPv4/IPv6 address)
imei (endpoint imei, numerical string)
iccid (sim iccid, numerical string)
imsi (sim imsi, numerical string)
timestamp (date, format YYYY-MM-DDTHH:mm:ssZ, for querying events of 1 day, deprecated in future)

1	curl -G https://cdn.emnify.net/api/v1/organisation/1.1/event \
2	-H "Authorization: Bearer <token>" \
3	-d sort= \
4	-d q=

1	[
2	{
3	"timestamp": "2019-07-16T12:07:09.000Z",
4	"alert": true,
5	"description": "PDP Context deleted.",
6	"id": 69535,
7	"event_type": {
8	"description": "Delete PDP Context",
9	"id": 4
10	},
11	"event_source": {
12	"name": "Network",
13	"id": 0
14	},
15	"event_severity": {
16	"description": "INFO",
17	"id": 0
18	},
19	"organisation": {
20	"name": "Organisation_Name",
21	"id": 2
22	},
23	"endpoint": {
24	"name": "Monitoring201",
25	"tags": "Monitoring",
26	"ip_address": "10.199.6.39",
27	"imei": null,
28	"id": 6
29	},
30	"sim": {
31	"iccid": "8988317000000000100",
32	"production_date": "2018-12-17T13:26:13.000Z",
33	"id": 110
34	},
35	"imsi": {
36	"imsi": 901430000000114,
37	"import_date": "2018-12-17T13:26:08.000Z",
38	"id": 110
39	}
40	}
41	]