Enterprise Threat Protector Reporting API v1

Access security, acceptable use policy, DNS activity, or indicator of compromise (IOC) event reports to analyze ETP traffic.

Learn more:

Overview

The Enterprise Threat Protector (ETP) Reporting API lets you access and analyze reports for security events, acceptable user policy events, and DNS activity totals. You can also view Indicator of Compromise (IOC) data to further analyze blacklisted entries. The API allows you flexible access to the same reporting features as in Akamai Control Center, using your own tools.

Who should use this API

This API is for site administrators, project managers, and technical support providers who implement or troubleshoot Enterprise Threat Protector (ETP) for your organization. To use this API, you should have a working knowledge of ETP and how the configurable objects interact. If you are not familiar with these topics, see the ETP Configuration API for more information.

Get started

Before using the ETP Reporting API for the first time:

  • Contact your Akamai representative to enable it for your account.

  • Review Get Started on tools that Akamai provides.

  • Review Authorize your Client to create your ETP Reporting API access credentials and authorizations. As detailed in API Identity Model, you then access the API using custom hostnames that looks like this: https://akzz-XXXXXXXXXXXXXXXX-XXXXXXXXXXXXXXXX.luna.akamaiapis.net.

Dual format responses

The event details operations for this API produce either JSON or CSV, depending on the value of the Accept header sent as part of the request. All other operations produce JSON objects.

Data retention policy

Enterprise Threat Protector (ETP) stores entries for 30 days, after which data becomes unavailable.

Resources

This section provides details on the API’s various operations.

The following list provides a road map of all the conceptual objects you deal with when interacting with the Enterprise Threat Protector (ETP) Reporting API, and provides pointers to where you can learn more.

  • Configuration ID: When you sign up for ETP, you receive a configuration and associated ID. You need to use this parameter for all operations in the ETP Reporting API. See List Configurations in the ETP Configuration API to obtain this value.

  • Threat Event: Threat events provide details on a detected or blocked threat, as directed by your custom ETP security lists. You can look at traffic details to gain insight on malicious websites or phishing campaigns.

  • AUP Event: AUP events provide details on a detected or blocked threat, as directed by the acceptable use policy assigned to your location. You can investigate false positives or provide additional details on why a specific page was blocked.

  • DNS Events: DNS Events provide details on detected threats when accessing a malicious domain. ETP then on-ramps the traffic to Nevada for further analysis.

  • DNS Activity: DNS activities lists the total number of DNS requests ETP serves on your behalf.

  • Security Connector Events: Security Connecter events provide details on malicious or suspicious traffic that ETP routes to a sinkhole device per the policy configuration. ETP collects information about the user device or machine that made the request, such as the internal IP address of the end user’s machine. This information allows you or an IT administrator to identify compromised machines in your network.

  • Indicator of Compromise (IOC) Analysis: You can use IOC API data to analyze blacklisted domains. This API provides information on the domain tree, domain registration, and historical record changes. See the Information and Changes object types.

  • Totals Report: This object lists categories and the total count of events for a category. See the Totals object type.

  • Details Report: This object provides a table view of event entries and relevant ETP configuration data. You can provide additional details on an action taken or use the information to research similar events. See the Details object type.

  • Time Series Report: This object lists a time series of event totals at a one hour granularity. See the TimeSeries object type.

  • Dimension: The Total and Time Series reports provide the dimension request parameter, which filters report data for a valid enumerated value. Operations support a single ENUM value in a request URL. If you don’t include optional parameter in the request URL, the response returns a single total for the default time period (30 days). See details about each operation’s parameters for more information.

  • Filters: You can filter report data by crafting a Filter object, supplied in the operation URL. You specify filter values to either include or exclude data from the report. You can add multiple filter entries and values to further parse report data. See the Filter object type.

  • Report Schedules: You can configure ETP to schedule and generate a report with alert information or information related to all events that occurred in a specified time frame. You can schedule a report to run on a daily basis or on specific days of the week. See the ReportSchedule object type.

API summary

Download the RAML descriptors for this API.

Operation Method Endpoint
Threat Event Report  
Report Threat Event Details GET /etp-report/v1/configs/{configId}/threat-events/details{?startTimeSec,endTimeSec,filters}
Report Threat Event Totals GET /etp-report/v1/configs/{configId}/threat-events/aggregate{?startTimeSec,dimension,endTimeSec,filters}
Report Threat Event Time Series GET /etp-report/v1/configs/{configId}/threat-events/time-series{?startTimeSec,dimension,endTimeSec,filters}
AUP Event Report  
Report AUP Event Details GET /etp-report/v1/configs/{configId}/aup-events/details{?startTimeSec,endTimeSec,filters}
Report AUP Event Totals GET /etp-report/v1/configs/{configId}/aup-events/aggregate{?startTimeSec,dimension,endTimeSec,filters}
Report AUP Event Time Series GET /etp-report/v1/configs/{configId}/aup-events/time-series{?startTimeSec,dimension,endTimeSec,filters}
DNS Activity Report  
Report DNS Activity Aggregate GET /etp-report/v1/configs/{configId}/dns-activities/aggregate{?startTimeSec,dimension,endTimeSec,filters}
Report DNS Activity Time Series GET /etp-report/v1/configs/{configId}/dns-activities/time-series{?startTimeSec,dimension,endTimeSec,filters}
Security Connector Event Report  
Report Security Connector Event Details GET /etp-report/v2/configs/{configId}/sinkhole-events/details{?startTimeSec,endTimeSec,filters}
Report Security Connector Event Totals GET /etp-report/v2/configs/{configId}/sinkhole-events/aggregate{?startTimeSec,dimension,endTimeSec,filters}
Report Security Connector Event Time Series GET /etp-report/v2/configs/{configId}/sinkhole-events/time-series{?startTimeSec,dimension,endTimeSec,filters}
IOC  
Report IOC Domain Tree GET /etp-report/v1/ioc/domain-tree{?record,recordType}
Report IOC Information GET /etp-report/v1/ioc/information{?record,recordType}
Report IOC Changes GET /etp-report/v1/ioc/changes{?startTimeSec,record,endTimeSec,recordType}
Report IOC Configuration Time Series GET /etp-report/v1/configs/{configId}/ioc/time-series{?startTimeSec,record,endTimeSec,recordType}
Report Schedule  
List Report Schedules GET /etp-report/v1/configs/{configId}/schedules
Create a Report Schedule POST /etp-report/v1/configs/{configId}/schedules
Get a Report Schedule GET /etp-report/v1/configs/{configId}/schedules/{scheduleId}
Update a Report Schedule PUT /etp-report/v1/configs/{configId}/schedules/{scheduleId}
Remove a Report Schedule DELETE /etp-report/v1/configs/{configId}/schedules/{scheduleId}
Enable a Report Schedule POST /etp-report/v1/configs/{configId}/schedules/{scheduleId}/enable
Disable a Report Schedule POST /etp-report/v1/configs/{configId}/schedules/{scheduleId}/disable

Report threat event details

Retrieves the raw events for the an ETP configuration for a given time period.

GET /etp-report/v1/configs/{configId}/threat-events/details{?startTimeSec,endTimeSec,filters}

Sample: /etp-report/v1/configs/100/threat-events/details?startTimeSec=1333631700&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

[
    {
        "id": "1",
        "configId": "640",
        "query": {
            "time": "2017-03-23T03:27:00Z",
            "clientIp": "208.114.124.44",
            "dnsIp": "23.216.52.23",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "A",
                    "response": "50.7.146.46",
                    "asn": "174"
                }
            ]
        },
        "event": {
            "detectionTime": "2017-03-23T03:27:34Z",
            "detectionType": "online",
            "siteId": "1401",
            "siteName": "MTN",
            "policyId": "1634",
            "policyName": "Got Honey?",
            "listId": "1",
            "listName": "Malware",
            "trigger": "domain",
            "categoryId": "1",
            "categoryName": "Malware",
            "confidenceId": "Known",
            "actionId": "344",
            "actionName": "Honeypot - BOSTON",
            "description": "Malware targeting Boston"
        }
    }
]

Status 200 text/csv

Response Body:

## domain: cmu.edu.
query_time,client_ip,dns_ip,domain,resolved_ip,query_type,detection_time,detection_type,location_name,policy_name,list_name,trigger,category_name,confidence_id,action_name,description
2017-06-05T09:10:22.978,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-05T09:10:22.978,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-05T09:09:16.144,198.18.179.244,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-05T09:09:16.144,online,Off Network ETP Clients,Ubuntu Policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-05T09:09:02.76,198.18.179.244,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-05T09:09:02.76,online,Off Network ETP Clients,Ubuntu Policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-05T09:09:02.721,198.18.179.244,100.74.32.3,cmu.edu.,N/A,AAAA,2017-06-05T09:09:02.721,online,Off Network ETP Clients,Ubuntu Policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.102,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.102,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.094,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.094,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.086,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.086,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.079,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.079,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.071,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.071,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.063,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.063,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.055,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.055,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.047,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.047,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.04,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.04,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.032,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.032,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.025,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.025,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.017,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.017,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.009,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.009,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.002,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.002,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.994,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.994,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.986,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.986,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.978,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.978,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.971,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.971,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.963,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.963,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.956,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.956,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.948,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.948,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.941,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.941,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.933,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.933,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.926,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.926,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.918,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.918,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.91,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.91,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.902,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.902,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.884,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.884,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.877,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.877,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.869,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.869,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.861,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.861,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.853,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.853,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.845,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.845,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.838,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.838,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.83,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.83,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.823,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.823,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.815,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.815,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.808,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.808,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.8,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.8,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.792,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.792,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.785,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.785,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.777,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.777,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.77,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.77,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.762,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.762,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.755,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.755,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.747,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.747,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.74,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.74,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.732,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.732,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.725,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.725,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.639,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.639,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.647,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.647,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.641,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.641,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.635,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.635,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.63,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.63,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.624,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.624,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.617,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.617,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.612,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.612,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.606,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.606,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.6,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.6,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.594,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.594,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.589,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.589,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.583,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.583,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.577,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.577,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.571,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.571,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.566,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.566,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.56,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.56,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.554,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.554,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.549,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.549,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.543,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.543,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.537,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.537,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.531,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.531,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.525,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.525,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.52,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.52,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.514,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.514,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.508,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.508,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.502,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.502,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.497,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.497,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.491,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.491,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.486,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.486,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.48,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.48,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.474,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.474,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.468,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.468,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.462,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.462,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.456,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.456,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.45,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.45,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.445,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.445,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.439,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.439,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.433,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.433,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.428,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.428,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.422,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.422,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.416,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.416,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.41,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.41,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.404,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.404,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.399,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.399,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.393,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.393,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.387,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.387,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.381,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.381,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.376,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.376,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.369,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.369,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.362,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.362,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.271,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.271,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.263,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.263,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.256,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.256,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.248,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.248,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.24,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.24,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.232,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.232,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.224,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.224,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.216,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.216,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.209,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.209,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.201,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.201,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.193,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.193,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.185,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.185,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.177,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.177,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.169,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.169,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.161,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.161,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.154,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.154,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.146,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.146,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.138,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.138,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.13,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.13,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.122,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.122,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.114,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.114,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.107,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.107,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.099,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.099,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.091,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.091,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.083,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.083,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.075,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.075,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.068,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.068,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.06,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.06,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.052,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.052,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.045,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.045,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.037,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.037,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.03,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.03,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.022,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.022,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.014,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.014,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.006,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.006,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.998,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.998,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.99,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.99,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.974,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.974,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.966,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.966,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.958,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.958,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.951,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.951,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.943,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.943,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.935,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.935,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.928,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.928,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.92,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.92,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.913,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.913,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.905,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.905,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.897,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.897,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.889,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.889,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.881,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.881,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.644,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.644,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.639,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.639,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.633,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.633,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.627,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.627,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.621,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.621,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.615,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.615,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.61,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.61,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.604,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.604,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.598,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.598,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.591,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.591,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.585,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.585,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.579,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.579,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.573,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.573,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.567,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.567,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.561,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.561,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.555,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.555,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.549,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.549,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.544,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.544,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.538,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.538,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.532,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.532,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.526,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.526,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.52,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.52,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.515,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.515,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.509,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.509,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.503,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.503,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.498,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.498,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.492,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.492,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.486,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.486,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.481,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.481,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.475,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.475,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.469,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.469,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.463,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.463,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.457,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.457,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.451,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.451,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.446,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.446,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.44,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.44,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.434,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.434,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.428,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.428,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.422,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.422,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.416,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.416,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.411,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.411,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.405,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.405,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.399,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.399,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.393,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.393,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.387,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.387,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.382,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.382,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.376,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.376,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.37,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.37,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.364,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.364,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.356,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.356,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.525,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.525,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.517,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.517,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.51,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.51,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.502,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.502,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.494,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.494,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.486,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.486,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.478,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.478,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.47,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.47,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.463,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.463,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.455,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.455,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.448,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.448,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.44,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.44,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.432,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.432,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.425,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.425,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.416,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.416,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.409,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.409,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.401,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.401,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.393,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.393,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.386,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.386,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.378,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.378,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.371,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.371,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.363,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.363,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.356,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.356,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.348,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.348,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.341,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.341,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.333,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.333,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.326,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.326,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.318,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.318,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.31,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.31,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.302,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.302,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.294,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.294,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.286,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.286,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.279,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.279,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.272,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.272,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.264,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.264,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.256,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.256,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.249,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.249,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.241,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.241,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.234,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.234,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.226,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.226,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.218,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.218,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.211,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.211,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.203,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.203,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.195,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.195,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.188,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.188,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.18,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.18,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.172,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.172,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.164,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.164,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.157,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.157,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.069,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.069,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.087,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.087,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.08,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.08,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.072,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.072,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.064,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.064,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.056,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.056,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.048,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.048,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.041,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.041,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.032,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.032,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.024,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.024,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.017,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.017,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.009,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.009,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.001,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.001,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.993,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.993,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.985,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.985,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.978,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.978,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.97,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.97,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.962,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.962,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.954,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.954,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.947,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.947,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.939,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.939,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.931,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.931,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.923,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.923,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.915,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.915,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.908,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.908,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.9,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.9,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.892,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.892,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.884,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.884,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.876,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.876,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.869,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.869,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.861,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.861,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.853,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.853,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.845,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.845,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.837,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.837,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.83,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.83,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.823,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.823,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.815,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.815,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.807,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.807,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.799,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.799,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.79,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.79,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.782,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.782,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.774,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.774,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.766,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.766,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.759,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.759,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.751,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.751,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.742,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.742,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.735,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.735,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.726,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.726,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.719,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.719,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.711,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.711,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.703,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.703,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.911,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.911,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.905,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.905,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.899,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.899,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.893,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.893,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.887,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.887,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.881,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.881,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.875,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.875,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.869,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.869,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.863,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.863,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.857,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.857,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.85,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.85,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.844,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.844,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.839,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.839,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.833,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.833,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.827,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.827,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.82,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.82,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.814,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.814,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.807,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.807,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.801,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.801,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.794,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.794,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.788,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.788,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.782,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.782,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.776,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.776,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.77,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.77,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.764,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.764,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.758,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.758,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.751,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.751,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.746,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.746,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.74,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.74,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.734,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.734,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.728,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.728,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.722,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.722,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.716,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.716,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.711,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.711,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.705,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.705,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.699,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.699,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.693,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.693,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.687,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.687,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.681,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.681,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.675,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.675,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.669,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.669,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.664,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.664,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.658,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.658,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.651,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.651,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.645,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.645,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.639,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.639,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.633,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.633,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.628,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.628,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.622,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.622,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.616,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.616,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:54.937,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:54.937,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.108,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.108,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.1,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.1,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.093,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.093,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.085,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.085,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.077,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.077,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.069,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.069,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.061,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.061,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.053,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.053,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.045,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.045,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.038,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.038,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.03,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.03,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.022,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.022,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.014,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.014,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.007,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.007,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.999,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.999,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.991,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.991,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.983,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.983,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.974,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.974,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.967,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.967,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.96,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.96,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.952,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.952,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.944,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.944,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.937,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.937,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.929,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.929,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.92,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.92,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.913,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.913,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.905,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.905,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.897,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.897,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.89,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.89,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.882,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.882,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.874,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.874,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.866,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.866,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.858,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.858,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.848,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.848,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.841,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.841,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.832,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.832,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.823,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.823,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.814,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.814,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.807,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.807,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.799,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.799,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.791,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.791,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.784,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.784,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.776,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.776,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.769,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.769,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.761,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.761,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.754,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.754,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.746,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.746,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.738,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.738,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.73,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.73,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.723,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.723,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.486,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.486,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.479,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.479,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.471,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.471,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.463,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.463,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.456,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.456,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.448,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.448,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.44,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.44,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.433,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.433,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.425,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.425,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.418,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.418,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.41,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.41,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.402,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.402,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.395,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.395,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.387,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.387,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.379,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.379,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.372,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.372,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.364,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.364,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.356,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.356,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.349,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.349,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.341,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.341,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.334,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.334,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.326,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.326,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.318,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.318,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.311,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.311,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.303,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.303,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.295,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.295,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.288,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.288,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.28,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.28,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.273,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.273,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.266,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.266,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.258,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.258,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.251,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.251,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.243,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.243,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.235,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.235,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.228,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.228,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.22,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.22,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.213,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.213,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.205,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.205,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.197,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.197,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.19,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.19,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.182,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.182,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.175,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.175,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.167,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.167,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.159,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.159,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.152,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.152,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.144,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.144,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.137,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.137,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.129,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.129,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.121,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.121,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.112,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.112,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:47.487,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:47.487,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:47.279,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:47.279,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:47.055,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:47.055,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:46.83,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:46.83,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:46.607,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:46.607,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:46.335,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:46.335,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:44.992,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:44.992,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:44.784,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:44.784,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:44.513,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:44.513,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:43.728,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:43.728,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:43.489,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:43.489,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:43.264,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:43.264,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:43.009,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:43.009,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:42.688,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:42.688,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:42.273,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:42.273,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:41.792,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:41.792,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:41.312,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:41.312,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:40.787,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:40.787,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:39.792,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:39.792,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:39.041,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:39.041,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:17.953,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:17.953,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:17.312,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:17.312,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:16.771,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:16.771,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:15.494,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:15.494,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:14.682,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:14.682,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:12.928,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:12.928,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:11.104,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:11.104,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:06.402,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:06.402,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:06.162,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:06.162,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:05.921,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:05.921,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:05.635,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:05.635,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:05.345,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:05.345,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:05.109,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:05.109,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:04.817,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:04.817,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:02.8,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:02.8,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:02.544,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:02.544,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:02.24,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:02.24,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:01.97,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:01.97,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:01.744,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:01.744,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:01.488,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:01.488,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:59.873,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:59.873,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:59.633,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:59.633,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:59.427,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:59.427,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:59.218,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:59.218,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:58.898,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:58.898,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:58.498,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:58.498,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:58.066,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:58.066,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:56.464,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:56.464,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:56,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:56,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:55.553,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:55.553,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:55.072,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:55.072,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:54.576,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:54.576,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:53.472,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:53.472,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:44.275,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:44.275,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:38.77,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:38.77,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:41:48.818,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:41:48.818,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:40:58.26,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:40:58.26,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:35:20.147,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:35:20.147,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:55.94,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:55.94,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:55.045,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:55.045,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:30.936,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:30.936,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:29.941,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:29.941,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:29.719,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:29.719,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:29.498,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:29.498,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:29.269,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:29.269,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:29.061,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:29.061,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:28.837,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:28.837,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:28.598,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:28.598,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:28.31,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:28.31,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:27.077,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:27.077,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:26.885,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:26.885,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:26.662,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:26.662,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:26.294,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:26.294,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:25.932,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:25.932,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:25.174,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:25.174,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:24.971,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:24.971,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:24.694,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:24.694,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:24.118,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:24.118,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:23.91,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:23.91,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:23.686,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:23.686,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:23.462,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:23.462,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:23.237,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:23.237,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:22.79,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:22.79,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:22.582,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:22.582,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:22.374,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:22.374,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:22.166,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:22.166,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:21.926,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:21.926,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:21.702,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:21.702,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:21.462,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:21.462,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:21.222,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:21.222,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:20.949,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:20.949,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:20.662,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:20.662,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:20.374,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:20.374,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:19.494,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:19.494,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:19.174,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:19.174,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:18.454,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:18.454,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:29:56.57,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:29:56.57,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:29:50.039,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:29:50.039,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:24:15.041,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:24:15.041,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:24:06.098,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:24:06.098,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:22:20.968,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:22:20.968,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:22:13.417,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:22:13.417,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:16:14.737,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:16:14.737,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:16:13.953,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:16:13.953,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:15:24.531,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:15:24.531,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:15:23.989,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:15:23.989,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:15:00.724,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:15:00.724,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:06:19.06,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:06:19.06,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:02:10.316,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:02:10.316,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:02:09.465,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:02:09.465,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:01:45.439,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:01:45.439,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:01:28.767,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:01:28.767,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:00:54.477,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:00:54.477,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None

Report threat event totals

Lists the count of threat events, grouped for a given granularity.

GET /etp-report/v1/configs/{configId}/threat-events/aggregate{?startTimeSec,dimension,endTimeSec,filters}

Sample: /etp-report/v1/configs/100/threat-events/aggregate?startTimeSec=1333631700&dimension=site&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
dimension Enumeration site Optionally filter by a dimension of data, either ACTION, ALERTS, ASN, CATEGORY, DOMAIN, LIST, POLICY, SITE, or DESTINATIONIP.
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

[
    {
        "id": "564",
        "name": "BOS-HQ-Corp",
        "total": 26
    },
    {
        "id": "1220",
        "name": "BOS-15S-Corp",
        "total": 10
    },
    {
        "id": "-1",
        "name": "Roaming",
        "total": 7
    },
    {
        "id": "841",
        "name": "DUB-1DL-Corp+Guest",
        "total": 7
    },
    {
        "id": "840",
        "name": "BOS-HQ-Guest",
        "total": 2
    }
]

Report threat event time series

Retrieves a list of threat event totals, aggregated by hour.

GET /etp-report/v1/configs/{configId}/threat-events/time-series{?startTimeSec,dimension,endTimeSec,filters}

Sample: /etp-report/v1/configs/100/threat-events/time-series?startTimeSec=1333631700&dimension=list&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
dimension Enumeration list Optionally filter by a dimension of data, either ACTION, ALERTS, ASN, CATEGORY, DOMAIN, LIST, POLICY, SITE, or DESTINATIONIP.
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

{
    "columns": [
        {
            "id": "TIMESTAMP",
            "name": "TIMESTAMP"
        },
        {
            "id": "1",
            "name": "Malware"
        },
        {
            "id": "3",
            "name": "C&C"
        },
        {
            "id": "2441",
            "name": "DeadStream"
        },
        {
            "id": "OTHERS",
            "name": "OTHERS"
        }
    ],
    "rows": [
        [
            "2017-03-22T10:00:00Z",
            0,
            3,
            0,
            0
        ],
        [
            "2017-03-22T12:00:00Z",
            2,
            0,
            0,
            0
        ],
        [
            "2017-03-22T14:00:00Z",
            15,
            0,
            0,
            0
        ]
    ]
}

Report AUP event details

Retrieves the raw AUP events of an ETP configuration for a given time period. This operation retrieves the first 500 configurable results.

GET /etp-report/v1/configs/{configId}/aup-events/details{?startTimeSec,endTimeSec,filters}

Sample: /etp-report/v1/configs/100/aup-events/details?startTimeSec=1333631700&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

[
    {
        "id": 1,
        "query": {
            "time": "2016-05-03T18:24:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-03T18:24:17Z",
            "detectionType": "offline",
            "siteId": "Cambridge",
            "policyId": "Sales Offices",
            "listName": "DGA",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 2,
        "query": {
            "time": "2016-05-03T18:53:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-03T18:53:05Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "US policy",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 3,
        "query": {
            "time": "2016-05-03T19:21:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-03T19:21:53Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "Sales Offices",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 4,
        "query": {
            "time": "2016-05-03T19:50:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-03T19:50:41Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "Corp policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Suspected",
            "actionId": "None",
            "description": "Violence"
        }
    },
    {
        "id": 5,
        "query": {
            "time": "2016-05-03T20:19:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-03T20:19:29Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "Corp Policy",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Suspected",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 6,
        "query": {
            "time": "2016-05-03T20:48:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-03T20:48:17Z",
            "detectionType": "offline",
            "siteId": "Remote site",
            "policyId": "US policy",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 7,
        "query": {
            "time": "2016-05-03T21:17:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-03T21:17:05Z",
            "detectionType": "offline",
            "siteId": "Remote site",
            "policyId": "Corp policy",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionId": "None",
            "description": "Violence"
        }
    },
    {
        "id": 8,
        "query": {
            "time": "2016-05-03T21:45:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "EGP-TESTOR"
                },
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "DNIC-AS-00096"
                }
            ]
        },
        "event": {
            "detectionTime": "2016-05-03T21:45:53Z",
            "detectionType": "offline",
            "siteId": "Remote site#2",
            "policyId": "Sales Offices",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 9,
        "query": {
            "time": "2016-05-03T22:14:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "EGP-TESTOR"
                },
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "DNIC-AS-00096"
                }
            ]
        },
        "event": {
            "detectionTime": "2016-05-03T22:14:41Z",
            "detectionType": "offline",
            "siteId": "Cambridge",
            "policyId": "Remote Users",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 10,
        "query": {
            "time": "2016-05-03T22:43:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "EGP-TESTOR"
                },
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "DNIC-AS-00096"
                }
            ]
        },
        "event": {
            "detectionTime": "2016-05-03T22:43:29Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "US policy",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 11,
        "query": {
            "time": "2016-05-03T23:12:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "EGP-TESTOR"
                },
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "DNIC-AS-00096"
                }
            ]
        },
        "event": {
            "detectionTime": "2016-05-03T23:12:17Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "Sales Offices",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 12,
        "query": {
            "time": "2016-05-03T23:41:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "EGP-TESTOR"
                },
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "DNIC-AS-00096"
                }
            ]
        },
        "event": {
            "detectionTime": "2016-05-03T23:41:05Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "Remote Users",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 13,
        "query": {
            "time": "2016-05-04T00:09:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "EGP-TESTOR"
                },
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "DNIC-AS-00096"
                }
            ]
        },
        "event": {
            "detectionTime": "2016-05-04T00:09:53Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "Corp Policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 14,
        "query": {
            "time": "2016-05-04T00:38:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "EGP-TESTOR"
                },
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "DNIC-AS-00096"
                }
            ]
        },
        "event": {
            "detectionTime": "2016-05-04T00:38:41Z",
            "detectionType": "offline",
            "siteId": "Remote site#2",
            "policyId": "US policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 15,
        "query": {
            "time": "2016-05-04T01:07:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "EGP-TESTOR"
                },
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "DNIC-AS-00096"
                }
            ]
        },
        "event": {
            "detectionTime": "2016-05-04T01:07:29Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "US policy",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 16,
        "query": {
            "time": "2016-05-04T01:36:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T01:36:17Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "Corp policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Suspected",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 17,
        "query": {
            "time": "2016-05-04T02:05:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T02:05:05Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "Corp policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Known",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 18,
        "query": {
            "time": "2016-05-04T02:33:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T02:33:53Z",
            "detectionType": "offline",
            "siteId": "Remote site",
            "policyId": "US policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 19,
        "query": {
            "time": "2016-05-04T03:02:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T03:02:41Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "US policy",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Adult",
            "confidenceId": "Known",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 20,
        "query": {
            "time": "2016-05-04T03:31:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T03:31:29Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "US policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 21,
        "query": {
            "time": "2016-05-04T04:00:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T04:00:17Z",
            "detectionType": "offline",
            "siteId": "Cambridge",
            "policyId": "US policy",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Suspected",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 22,
        "query": {
            "time": "2016-05-04T04:29:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T04:29:05Z",
            "detectionType": "offline",
            "siteId": "Cambridge",
            "policyId": "US policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Adult",
            "confidenceId": "Suspected",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 23,
        "query": {
            "time": "2016-05-04T04:57:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T04:57:53Z",
            "detectionType": "offline",
            "siteId": "Remote site#2",
            "policyId": "Corp policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Known",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 24,
        "query": {
            "time": "2016-05-04T05:26:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T05:26:41Z",
            "detectionType": "offline",
            "siteId": "Cambridge",
            "policyId": "Remote Users",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Suspected",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 25,
        "query": {
            "time": "2016-05-04T05:55:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T05:55:29Z",
            "detectionType": "offline",
            "siteId": "Cambridge",
            "policyId": "US policy",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Suspected",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 26,
        "query": {
            "time": "2016-05-04T06:24:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T06:24:17Z",
            "detectionType": "offline",
            "siteId": "Remote site",
            "policyId": "Corp policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Adult",
            "confidenceId": "Known",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 27,
        "query": {
            "time": "2016-05-04T06:53:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T06:53:05Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "Corp policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Suspected",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 28,
        "query": {
            "time": "2016-05-04T07:21:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T07:21:53Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "Remote Users",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Known",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 29,
        "query": {
            "time": "2016-05-04T07:50:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T07:50:41Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "Remote Users",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Suspected",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 30,
        "query": {
            "time": "2016-05-04T08:19:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T08:19:29Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "US policy",
            "listName": "Command and Control",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 31,
        "query": {
            "time": "2016-05-04T08:48:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T08:48:17Z",
            "detectionType": "offline",
            "siteId": "Remote site#2",
            "policyId": "Corp Policy",
            "listName": "DGA",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 32,
        "query": {
            "time": "2016-05-04T09:17:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T09:17:05Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "Remote Users",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Suspected",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 33,
        "query": {
            "time": "2016-05-04T09:45:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T09:45:53Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "US policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Suspected",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 34,
        "query": {
            "time": "2016-05-04T10:14:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T10:14:41Z",
            "detectionType": "offline",
            "siteId": "Remote site#2",
            "policyId": "Remote Users",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Suspected",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 35,
        "query": {
            "time": "2016-05-04T10:43:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T10:43:29Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "US policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Suspected",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 36,
        "query": {
            "time": "2016-05-04T11:12:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T11:12:17Z",
            "detectionType": "offline",
            "siteId": "Cambridge",
            "policyId": "US policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 37,
        "query": {
            "time": "2016-05-04T11:41:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T11:41:05Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "Sales Offices",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 38,
        "query": {
            "time": "2016-05-04T12:09:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T12:09:53Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "Sales Offices",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Adult",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 39,
        "query": {
            "time": "2016-05-04T12:38:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T12:38:41Z",
            "detectionType": "offline",
            "siteId": "Remote site",
            "policyId": "US policy",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 40,
        "query": {
            "time": "2016-05-04T13:07:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T13:07:29Z",
            "detectionType": "offline",
            "siteId": "Remote site#2",
            "policyId": "Corp Policy",
            "listName": "Command and Control",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Suspected",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 41,
        "query": {
            "time": "2016-05-04T13:36:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T13:36:17Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "Sales Offices",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Known",
            "actionId": "None",
            "description": "Violence"
        }
    },
    {
        "id": 42,
        "query": {
            "time": "2016-05-04T14:05:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T14:05:05Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "US policy",
            "listName": "DGA",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 43,
        "query": {
            "time": "2016-05-04T14:33:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T14:33:53Z",
            "detectionType": "offline",
            "siteId": "Remote site#2",
            "policyId": "Corp Policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Adult",
            "confidenceId": "Known",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 44,
        "query": {
            "time": "2016-05-04T15:02:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T15:02:41Z",
            "detectionType": "offline",
            "siteId": "Remote site",
            "policyId": "Corp Policy",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 45,
        "query": {
            "time": "2016-05-04T15:31:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T15:31:29Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "Sales Offices",
            "listName": "Command and Control",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 46,
        "query": {
            "time": "2016-05-04T16:00:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T16:00:17Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "US policy",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Adult",
            "confidenceId": "Known",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 47,
        "query": {
            "time": "2016-05-04T16:29:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T16:29:05Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "Sales Offices",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Adult",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 48,
        "query": {
            "time": "2016-05-04T16:57:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T16:57:53Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "Corp policy",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 49,
        "query": {
            "time": "2016-05-04T17:26:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T17:26:41Z",
            "detectionType": "offline",
            "siteId": "Cambridge",
            "policyId": "Remote Users",
            "listName": "DGA",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Known",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 50,
        "query": {
            "time": "2016-05-04T17:55:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T17:55:29Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "US policy",
            "listName": "DGA",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Known",
            "actionName": "None",
            "description": "Violence"
        }
    }
]

Status 200 text/csv

Response Body:

## category: Social
query_time,client_ip,dns_ip,domain,resolved_ip,query_type,detection_time,detection_type,location_name,policy_name,trigger,category_name,confidence_id,action_name,description
2017-06-05T13:58:24.458,198.18.179.244,100.74.32.3,linkedin.com.,108.174.10.10,A,2017-06-05T13:58:24.458,online,Roaming,Unknown,domain,Social,Unknown,Block page,None
2017-06-05T07:42:28.103,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,N/A,AAAA,2017-06-05T07:42:28.103,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-05T07:42:28.033,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,"54.213.76.99,52.41.230.224,54.148.190.222,54.148.59.150,54.186.39.123,54.187.98.195,54.201.188.11,35.165.181.13",A,2017-06-05T07:42:28.033,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-05T07:42:28,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,"35.165.181.13,54.213.76.99,54.201.188.11,54.148.59.150,35.166.101.186,54.187.98.195,54.186.39.123,35.167.220.41",A,2017-06-05T07:42:28,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-04T21:57:57.355,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,172.217.12.110,172.217.12.110",A,2017-06-04T21:57:57.355,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-04T21:57:56.489,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:4002:0811:0000:0000:0000:200e",AAAA,2017-06-04T21:57:56.489,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-04T21:57:56.485,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,172.217.12.110,172.217.12.110",A,2017-06-04T21:57:56.485,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-04T21:57:56.454,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:4002:0811:0000:0000:0000:200e",AAAA,2017-06-04T21:57:56.454,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-04T21:57:56.351,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,172.217.12.110,172.217.12.110",A,2017-06-04T21:57:56.351,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-03T21:57:56.401,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,172.217.12.110,172.217.12.110",A,2017-06-03T21:57:56.401,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-03T21:57:55.466,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:4002:0811:0000:0000:0000:200e",AAAA,2017-06-03T21:57:55.466,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-03T21:57:55.462,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,172.217.12.110,172.217.12.110",A,2017-06-03T21:57:55.462,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-03T21:57:55.431,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:4002:0811:0000:0000:0000:200e",AAAA,2017-06-03T21:57:55.431,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-03T21:57:55.395,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,172.217.12.110,172.217.12.110",A,2017-06-03T21:57:55.395,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-03T07:42:28.179,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,N/A,AAAA,2017-06-03T07:42:28.179,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-03T07:42:28.059,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,"54.148.59.150,50.112.45.104,52.26.121.92,52.41.230.224,52.40.81.184,52.11.31.31,52.26.221.216,54.148.190.222",A,2017-06-03T07:42:28.059,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-02T07:42:28.474,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,N/A,AAAA,2017-06-02T07:42:28.474,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-02T07:42:28.254,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,"35.166.101.186,52.11.31.31,35.167.220.41,50.112.45.104,54.213.76.99,35.165.181.13,54.201.188.11,52.26.121.92",A,2017-06-02T07:42:28.254,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-02T01:03:35.386,198.18.179.85,100.74.32.3,google.com.,"173.194.209.101,173.194.209.100,173.194.209.138,173.194.209.139,173.194.209.102,173.194.209.113",A,2017-06-02T01:03:35.386,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T23:47:23.679,198.18.179.85,100.74.32.3,google.com.,"173.194.209.138,173.194.209.102,173.194.209.139,173.194.209.101,173.194.209.113,173.194.209.100",A,2017-06-01T23:47:23.679,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T23:47:02.921,198.18.179.159,100.74.32.3,google.com.,"108.177.11.100,108.177.11.139,108.177.11.102,108.177.11.113,108.177.11.101,108.177.11.138",A,2017-06-01T23:47:02.921,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T23:46:52.66,198.18.179.85,100.74.32.3,google.com.,"173.194.209.113,173.194.209.100,173.194.209.138,173.194.209.102,173.194.209.139,173.194.209.101",A,2017-06-01T23:46:52.66,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T23:46:23.636,198.18.179.85,100.74.32.3,google.com.,"173.194.209.101,173.194.209.113,173.194.209.100,173.194.209.138,173.194.209.102,173.194.209.139",A,2017-06-01T23:46:23.636,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T20:36:15.31,198.18.179.83,100.74.32.3,liberalkonservativt.se.,50.31.90.176,A,2017-06-01T20:36:15.31,online,Sarah Ubuntu location,Mac policy,domain,Social,Unknown,Block page,None
2017-06-01T20:35:32.108,198.18.179.83,100.74.32.3,redmik.pl.,193.70.43.236,A,2017-06-01T20:35:32.108,online,Sarah Ubuntu location,Mac policy,domain,Social,Unknown,Block page,None
2017-06-01T19:05:01.528,198.18.179.85,100.74.32.3,google.com.,"74.125.26.139,74.125.26.100,74.125.26.113,74.125.26.138,74.125.26.102,74.125.26.101",A,2017-06-01T19:05:01.528,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T19:04:31.502,198.18.179.85,100.74.32.3,google.com.,"74.125.26.101,74.125.26.139,74.125.26.100,74.125.26.113,74.125.26.138,74.125.26.102",A,2017-06-01T19:04:31.502,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T17:07:34.562,198.18.179.159,100.74.32.3,google.com.,"173.194.209.100,173.194.209.138,173.194.209.102,173.194.209.101,173.194.209.139,173.194.209.113",A,2017-06-01T17:07:34.562,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T13:03:20.758,198.18.179.85,100.74.32.3,www.google.com.,"74.125.31.99,74.125.31.106,74.125.31.104,74.125.31.147,74.125.31.105,74.125.31.103",A,2017-06-01T13:03:20.758,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T13:03:19.276,198.18.179.85,100.74.32.3,3.client-channel.google.com.,74.125.31.189,A,2017-06-01T13:03:19.276,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T07:42:33.53,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:400c:0c04:0000:0000:0000:0088",AAAA,2017-06-01T07:42:33.53,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T07:42:33.526,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.26.190,74.125.26.91,74.125.26.93,74.125.26.136",A,2017-06-01T07:42:33.526,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T07:42:33.5,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:400c:0c04:0000:0000:0000:0088",AAAA,2017-06-01T07:42:33.5,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T07:42:33.413,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.26.136,74.125.26.190,74.125.26.91,74.125.26.93",A,2017-06-01T07:42:33.413,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T07:42:33.413,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.26.136,74.125.26.190,74.125.26.91,74.125.26.93",A,2017-06-01T07:42:33.413,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T07:42:28.132,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,N/A,AAAA,2017-06-01T07:42:28.132,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-01T07:42:28.088,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,"54.187.98.195,50.112.45.104,35.167.220.41,35.166.101.186,54.186.39.123,35.165.181.13,54.213.76.99,54.201.188.11",A,2017-06-01T07:42:28.088,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-01T04:03:13.986,198.18.179.159,100.74.32.3,google.com.,"74.125.26.139,74.125.26.138,74.125.26.113,74.125.26.100,74.125.26.102,74.125.26.101",A,2017-06-01T04:03:13.986,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T21:01:01.67,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.139.190,74.125.139.91,74.125.139.93,74.125.139.136",A,2017-05-31T21:01:01.67,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T21:01:00.703,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.139.93,74.125.139.136,74.125.139.190,74.125.139.91",A,2017-05-31T21:01:00.703,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T21:01:00.703,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:400c:0c05:0000:0000:0000:0088",AAAA,2017-05-31T21:01:00.703,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T21:01:00.686,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:400c:0c05:0000:0000:0000:0088",AAAA,2017-05-31T21:01:00.686,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T21:01:00.662,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.139.93,74.125.139.136,74.125.139.190,74.125.139.91",A,2017-05-31T21:01:00.662,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T19:14:05.545,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.139.190,74.125.139.91,74.125.139.136,74.125.139.93",A,2017-05-31T19:14:05.545,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T19:14:05.537,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.139.93,74.125.139.190,74.125.139.91,74.125.139.136",A,2017-05-31T19:14:05.537,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T19:14:05.519,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:400c:0c05:0000:0000:0000:00be",AAAA,2017-05-31T19:14:05.519,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T19:14:05.482,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.139.190,74.125.139.91,74.125.139.136,74.125.139.93",A,2017-05-31T19:14:05.482,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T19:14:05.481,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.139.190,74.125.139.91,74.125.139.136,74.125.139.93",A,2017-05-31T19:14:05.481,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None

Report AUP event totals

Lists total counts for AUP events, aggregated for the given time period.

GET /etp-report/v1/configs/{configId}/aup-events/aggregate{?startTimeSec,dimension,endTimeSec,filters}

Sample: /etp-report/v1/configs/100/aup-events/aggregate?startTimeSec=1333631700&dimension=CATEGORY&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
dimension Enumeration CATEGORY Optionally filter by a dimension of data, either CATEGORY, DOMAIN, POLICY, or SITE.
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

[
    {
        "id": "-1",
        "name": "Gambling",
        "total": 321
    },
    {
        "id": "1",
        "name": "Firearms",
        "total": 201
    },
    {
        "id": "2",
        "name": "Violence",
        "total": 98
    },
    {
        "id": "3",
        "name": "Adult",
        "total": 12
    },
    {
        "id": "OTHERS",
        "total": 6
    }
]

Report AUP event time series

Lists total counts for AUP events, aggregated by hour.

GET /etp-report/v1/configs/{configId}/aup-events/time-series{?startTimeSec,dimension,endTimeSec,filters}

Sample: /etp-report/v1/configs/100/aup-events/time-series?startTimeSec=1333631700&dimension=CATEGORY&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
dimension Enumeration CATEGORY Optionally filter by a dimension of data, either CATEGORY, DOMAIN, POLICY, or SITE.
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

{
    "columns": [
        {
            "id": "TIMESTAMP"
        },
        {
            "id": "aup-events"
        }
    ],
    "rows": [
        [
            "2016-05-03T18:24:17Z",
            8
        ],
        [
            "2016-05-03T18:53:05Z",
            946
        ],
        [
            "2016-05-03T19:21:53Z",
            888
        ],
        [
            "2016-05-03T19:50:41Z",
            398
        ],
        [
            "2016-05-03T20:19:29Z",
            79
        ],
        [
            "2016-05-03T20:48:17Z",
            25
        ],
        [
            "2016-05-03T21:17:05Z",
            300
        ],
        [
            "2016-05-03T21:45:53Z",
            395
        ],
        [
            "2016-05-03T22:14:41Z",
            715
        ],
        [
            "2016-05-03T22:43:29Z",
            671
        ]
    ]
}

Report DNS activity aggregate

Lists the count of DNS activities aggregated for the given time period.

GET /etp-report/v1/configs/{configId}/dns-activities/aggregate{?startTimeSec,dimension,endTimeSec,filters}

Sample: /etp-report/v1/configs/100/dns-activities/aggregate?startTimeSec=1333631700&dimension=Country&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
dimension Enumeration Country Optionally filter by a dimension of data, either ASN, DOMAIN, COUNTRY, or SITE.
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

[
    {
        "id": "US",
        "total": 123442
    },
    {
        "id": "JP",
        "total": 92342
    },
    {
        "id": "IN",
        "total": 23434
    },
    {
        "id": "UK",
        "total": 234445
    },
    {
        "id": "OTHERS",
        "total": 23423431
    }
]

Report DNS activity time series

Lists the count of DNS activities, aggregated by hour.

GET /etp-report/v1/configs/{configId}/dns-activities/time-series{?startTimeSec,dimension,endTimeSec,filters}

Sample: /etp-report/v1/configs/100/dns-activities/time-series?startTimeSec=1333631700&dimension=Country&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
dimension Enumeration Country Optionally filter by a dimension of data, , either ASN, DOMAIN, COUNTRY, or SITE.
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

{
    "columns": [
        {
            "id": "TIMESTAMP"
        },
        {
            "id": "US"
        },
        {
            "id": "JP"
        },
        {
            "id": "IN"
        },
        {
            "id": "OTHERS"
        }
    ],
    "rows": [
        [
            "2016-05-03T18:24:17Z",
            8,
            231,
            235,
            588
        ],
        [
            "2016-05-03T18:53:05Z",
            946,
            134,
            62,
            86
        ],
        [
            "2016-05-03T19:21:53Z",
            888,
            985,
            36,
            851
        ],
        [
            "2016-05-03T19:50:41Z",
            398,
            847,
            934,
            131
        ],
        [
            "2016-05-03T20:19:29Z",
            794,
            691,
            18,
            444
        ],
        [
            "2016-05-03T20:48:17Z",
            25,
            109,
            428,
            359
        ],
        [
            "2016-05-03T21:17:05Z",
            300,
            202,
            266,
            473
        ],
        [
            "2016-05-03T21:45:53Z",
            395,
            501,
            955,
            783
        ],
        [
            "2016-05-03T22:14:41Z",
            715,
            7,
            619,
            227
        ],
        [
            "2016-05-03T22:43:29Z",
            671,
            490,
            525,
            140
        ]
    ]
}

Report security connector event details

Retrieves the Security Connector events for the an ETP configuration for a given time period.

GET /etp-report/v2/configs/{configId}/sinkhole-events/details{?startTimeSec,endTimeSec,filters}

Sample: /etp-report/v2/configs/100/sinkhole-events/details?startTimeSec=1333631700&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

[
    {
        "sinkholeId": "1234-someId",
        "eventId": "1234-5678-abcd",
        "sourcePort": 16362,
        "destinationPort": 80,
        "l4Protocol": "TCP",
        "machineNames": [
            "blr-mpz72",
            "blr-mpa-71"
        ],
        "hostname": "www.somedomain.com",
        "userAgent": "CITRIXRECEIVER",
        "l7Protocol": "HTTP",
        "eventTime": "2018-03-23T09:13:10Z",
        "url": "/index.html",
        "sinkholeName": "1234_some_sinkhole_name",
        "hitCount": 1,
        "configId": 100,
        "internalIP": "1.2.3.4",
        "sinkholeIP": "1.2.3.5"
    },
    {
        "sinkholeId": "1234-someId",
        "eventId": "1234-5678#abcd",
        "sourcePort": 16361,
        "destinationPort": 80,
        "l4Protocol": "TCP",
        "machineNames": [
            "blr-mpz72",
            "blr-mpa-71"
        ],
        "hostname": "www.somedomain.com",
        "userAgent": "CITRIXRECEIVER",
        "l7Protocol": "HTTP",
        "eventTime": "2018-03-23T09:14:10Z",
        "url": "/index.html",
        "sinkholeName": "1234_some_sinkhole_name",
        "hitCount": 1,
        "configId": 100,
        "internalIP": "1.2.3.4",
        "sinkholeIP": "1.2.3.5"
    },
    {
        "sinkholeId": "1234-someId",
        "eventId": "1234#5678-abcd",
        "sourcePort": 54484,
        "destinationPort": 80,
        "l4Protocol": "TCP",
        "machineNames": [
            "blr-mpz72",
            "blr-mpa-71"
        ],
        "hostname": "www.somedomain.com",
        "userAgent": "CITRIXRECEIVER",
        "l7Protocol": "HTTP",
        "eventTime": "2018-03-23T09:15:10Z",
        "url": "/index.html",
        "sinkholeName": "1234_some_sinkhole_name",
        "hitCount": 1,
        "configId": 100,
        "internalIP": "1.2.3.4",
        "sinkholeIP": "1.2.3.5"
    }
]

Status 200 text/csv

Response Body:

## Time Zone: UTC +05:30
EventTime,SecurityConnectorName,EventId,AffectedInternalIP,SourcePort,DestinationPort,Layer4Protocol,Hostname,UserAgent,Layer7Protocol,URL,HitCount,Domain,MachineNames
2018-03-22T09:53:58,cdfc6fd6-f781-4c27-8a70-a7f0942570a7,1521692638000#cdfc6fd6-f781-4c27-8a70-a7f0942570a7#21397,172.27.2.37,58804,500,TCP,N/A,N/A,,N/A,1,,
2018-03-22T09:53:44,cdfc6fd6-f781-4c27-8a70-a7f0942570a7,1521692624000#cdfc6fd6-f781-4c27-8a70-a7f0942570a7#41875,172.27.2.37,58417,22,TCP,N/A,N/A,,N/A,1,,
2018-03-21T09:59:09,cdfc6fd6-f781-4c27-8a70-a7f0942570a7,1521606549000#cdfc6fd6-f781-4c27-8a70-a7f0942570a7#871,172.27.2.37,59545,500,TCP,N/A,N/A,,N/A,1,,
2018-03-21T09:58:55,cdfc6fd6-f781-4c27-8a70-a7f0942570a7,1521606535000#cdfc6fd6-f781-4c27-8a70-a7f0942570a7#25537,172.27.2.37,59157,22,TCP,N/A,N/A,,N/A,1,,
2018-03-20T10:01:06,cdfc6fd6-f781-4c27-8a70-a7f0942570a7,1521520266000#cdfc6fd6-f781-4c27-8a70-a7f0942570a7#1718,172.27.2.37,55209,500,TCP,N/A,N/A,,N/A,1,,
2018-03-20T10:00:52,cdfc6fd6-f781-4c27-8a70-a7f0942570a7,1521520252000#cdfc6fd6-f781-4c27-8a70-a7f0942570a7#14004,172.27.2.37,54824,22,TCP,N/A,N/A,,N/A,1,

Report security connector event totals

Lists the count of Security Connector events, grouped for a given granularity.

GET /etp-report/v2/configs/{configId}/sinkhole-events/aggregate{?startTimeSec,dimension,endTimeSec,filters}

Sample: /etp-report/v2/configs/100/sinkhole-events/aggregate?startTimeSec=1333631700&dimension=internalIP&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
dimension Enumeration internalIP Optionally filter by a dimension of data, either INTERNALIP, SOURCEPORT, DESTINATIONPORT, SINKHOLEID, SINKHOLEIP, HOSTNAME, MACHINENAME, UUID, DESTINATIONIP, SITE, LIST, POLICY, ACTION, CATEGORY, ISALERT, CONFIDENCE, or DOMAIN.
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

{
    "aggregations": [
        {
            "id": "172.27.2.37",
            "name": "172.27.2.37",
            "total": 14
        }
    ],
    "dimension": {
        "id": "sourceIP",
        "name": "internalIP",
        "total": 1
    }
}

Report security connector event time series

Retrieves a list of Security Connector event totals, aggregated by hour.

GET /etp-report/v2/configs/{configId}/sinkhole-events/time-series{?startTimeSec,dimension,endTimeSec,filters}

Sample: /etp-report/v2/configs/100/sinkhole-events/time-series?startTimeSec=1333631700&dimension=internalIP&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
dimension Enumeration internalIP Optionally filter by a dimension of data, either INTERNALIP, SOURCEPORT, DESTINATIONPORT, SINKHOLEID, SINKHOLEIP, HOSTNAME, MACHINENAME, UUID, DESTINATIONIP, SITE, LIST, POLICY, ACTION, CATEGORY, ISALERT, CONFIDENCE, or DOMAIN.
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

{
    "columns": [
        {
            "id": "TIMESTAMP",
            "name": "TIMESTAMP"
        },
        {
            "id": "198.18.179.37",
            "name": "198.18.179.37"
        },
        {
            "id": "172.27.2.37",
            "name": "172.27.2.37"
        },
        {
            "id": "198.18.179.237",
            "name": "198.18.179.237"
        },
        {
            "id": "172.28.117.126",
            "name": "172.28.117.126"
        },
        {
            "id": "OTHERS",
            "name": "OTHERS"
        }
    ],
    "rows": [
        [
            "2018-02-28T18:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-02-28T20:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-02-28T22:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T00:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T02:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T04:00:00Z",
            0,
            2,
            0,
            0,
            0
        ],
        [
            "2018-03-01T06:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T08:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T10:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T12:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T14:00:00Z",
            104,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T16:00:00Z",
            300,
            0,
            0,
            2,
            0
        ],
        [
            "2018-03-01T18:00:00Z",
            5398,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T20:00:00Z",
            0,
            0,
            0,
            0,
            0
        ]
    ]
}

Report IOC domain tree

Retrieves a list of blacklisted domains matching a given record. Returns an empty list if the record is unlisted.

GET /etp-report/v1/ioc/domain-tree{?record,recordType}

Sample: /etp-report/v1/ioc/domain-tree?record=05xy.abc.com&recordType=DOMAIN

Parameter Type Sample Description
Required Query Parameters
record String 05xy.abc.com The target record from which to retrieve blacklisted domains.
Optional Query Parameters
recordType Enumeration DOMAIN Specifies the record type, either DOMAIN or IP.

Status 200 application/json

Response Body:

[
    "00005ik.rcomhost.com."
]

Report IOC information

Retrieves the latest snapshot information for a given Domain or IP.

GET /etp-report/v1/ioc/information{?record,recordType}

Sample: /etp-report/v1/ioc/information?record=05xy.abc.com&recordType=DOMAIN

Parameter Type Sample Description
Required Query Parameters
record String 05xy.abc.com The target record from which to retrieve blacklisted domains.
Optional Query Parameters
recordType Enumeration DOMAIN Specifies the record type, either DOMAIN or IP.

Status 200 application/json

Response Body:

{
    "record": "00005ik.rcomhost.com.",
    "recordType": "DOMAIN",
    "description": "Locky Ransomware distribution site",
    "registrarName": "NETWORK SOLUTIONS, LLC.",
    "registrantName": "LLC, networksolutions",
    "registrantOrganization": "Network Solutions LLC",
    "registrantCity": "HERNDON",
    "registrantState": "VA",
    "registrantEmails": [
        "Domains@web.com"
    ],
    "nameServerNames": [
        "NS45.WORLDNIC.COM",
        "NS46.WORLDNIC.COM"
    ],
    "registrantAddress": "HERNDON",
    "registrantCountry": "UNITED STATES",
    "whoisServer": "whois.networksolutions.com",
    "createdDate": "2012-01-25T00:00:00Z",
    "lastModifiedDate": "2014-02-26T00:00:00Z"
}

Report IOC changes

Retrieves a list of historical change information for a given record and record type. If you omit startTimeSec and endTimeSec from the request URL, the operation provides all available historical information.

GET /etp-report/v1/ioc/changes{?startTimeSec,record,endTimeSec,recordType}

Sample: /etp-report/v1/ioc/changes?startTimeSec=1333631700&record=05xy.abc.com&endTimeSec=1333631700&recordType=DOMAIN

Parameter Type Sample Description
Required Query Parameters
record String 05xy.abc.com The target record from which to retrieve blacklisted domains.
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
recordType Enumeration DOMAIN Specifies the record type, either DOMAIN or IP.

Status 200 application/json

Response Body:

[
    {
        "recordType": "DOMAIN",
        "date": "2017-03-07T00:00:00Z",
        "state": "ADDED",
        "description": "First tracked"
    },
    {
        "recordType": "DOMAIN",
        "date": "2017-03-07T00:00:00Z",
        "state": "CHANGED",
        "description": "Severity upgraded from Unknown to Suspected Malware",
        "key": "CONFIDENCE",
        "oldValue": "Unknown",
        "newValue": "Suspected",
        "listId": "1",
        "listName": "Malware"
    }
]

Report IOC configuration time series

Retrieves the DNS activities of a configuration for a given domain or IP, aggregated by day. If you omit startTimeSec and endTimeSec from the request URL, the operation provides all available historical information.

GET /etp-report/v1/configs/{configId}/ioc/time-series{?startTimeSec,record,endTimeSec,recordType}

Sample: /etp-report/v1/configs/100/ioc/time-series?startTimeSec=1333631700&record=05xy.abc.com&endTimeSec=1333631700&recordType=DOMAIN

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
record String 05xy.abc.com The target record from which to retrieve blacklisted domains.
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
recordType Enumeration DOMAIN Specifies the record type, either DOMAIN or IP.

Status 200 application/json

Response Body:

{
    "columns": [
        {
            "id": "TIMESTAMP",
            "name": "TIMESTAMP"
        },
        {
            "id": "TOTAL",
            "name": "TOTAL"
        }
    ],
    "rows": [
        [
            "2017-02-23T00:00:00Z",
            0
        ],
        [
            "2017-02-24T00:00:00Z",
            0
        ],
        [
            "2017-02-25T00:00:00Z",
            0
        ],
        [
            "2017-02-26T00:00:00Z",
            0
        ],
        [
            "2017-02-27T00:00:00Z",
            0
        ],
        [
            "2017-02-28T00:00:00Z",
            0
        ],
        [
            "2017-03-01T00:00:00Z",
            0
        ],
        [
            "2017-03-02T00:00:00Z",
            0
        ],
        [
            "2017-03-03T00:00:00Z",
            0
        ],
        [
            "2017-03-04T00:00:00Z",
            0
        ],
        [
            "2017-03-05T00:00:00Z",
            0
        ],
        [
            "2017-03-06T00:00:00Z",
            0
        ],
        [
            "2017-03-07T00:00:00Z",
            0
        ],
        [
            "2017-03-08T00:00:00Z",
            0
        ],
        [
            "2017-03-09T00:00:00Z",
            0
        ],
        [
            "2017-03-10T00:00:00Z",
            0
        ],
        [
            "2017-03-11T00:00:00Z",
            0
        ],
        [
            "2017-03-12T00:00:00Z",
            0
        ],
        [
            "2017-03-13T00:00:00Z",
            0
        ],
        [
            "2017-03-14T00:00:00Z",
            0
        ],
        [
            "2017-03-15T00:00:00Z",
            0
        ],
        [
            "2017-03-16T00:00:00Z",
            2
        ],
        [
            "2017-03-17T00:00:00Z",
            0
        ],
        [
            "2017-03-18T00:00:00Z",
            0
        ],
        [
            "2017-03-19T00:00:00Z",
            0
        ],
        [
            "2017-03-20T00:00:00Z",
            0
        ],
        [
            "2017-03-21T00:00:00Z",
            0
        ],
        [
            "2017-03-22T00:00:00Z",
            0
        ],
        [
            "2017-03-23T00:00:00Z",
            0
        ]
    ]
}

List report schedules

Retrieves all configured report schedules for a given ETP configuration.

GET /etp-report/v1/configs/{configId}/schedules

Sample: /etp-report/v1/configs/100/schedules

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.

Status 200 application/json

Response Body:

[
    {
        "scheduleId": 100,
        "recurrence": "WEEKLY",
        "dayOfWeek": "MONDAY",
        "userTimeZone": "+05:30",
        "filters": {
            "isAlert": {
                "in": [
                    "true"
                ]
            }
        },
        "status": "ENABLED",
        "reportTemplate": "THREAT_EVENTS_BY_LOCATION_AND_DOMAIN",
        "emails": [
            "user1@akamai.com",
            "user2@akamai.com"
        ],
        "createdBy": "user1",
        "creationDate": "2017-06-22T11:12:55Z",
        "modifiedBy": "user2",
        "modifiedDate": "2017-06-28T11:12:55Z"
    },
    {
        "scheduleId": 110,
        "recurrence": "DAILY",
        "dayOfWeek": null,
        "userTimeZone": "+05:30",
        "status": "ENABLED",
        "reportTemplate": "THREAT_EVENTS_BY_LOCATION_AND_DOMAIN",
        "emails": [
            "user1@akamai.com"
        ],
        "createdBy": "user1",
        "creationDate": "2017-06-23T11:12:55Z",
        "modifiedBy": "user1",
        "modifiedDate": "2017-06-23T11:12:55Z"
    }
]

Create a report schedule

Creates a new report schedule for a given ETP configuration.

POST /etp-report/v1/configs/{configId}/schedules

Sample: /etp-report/v1/configs/100/schedules

Content-Type: application/json

Request Body:

{
    "recurrence": "WEEKLY",
    "dayOfWeek": "MONDAY",
    "userTimeZone": "+05:30",
    "filters": {
        "isAlert": {
            "in": [
                "true"
            ]
        }
    },
    "emails": [
        "user1@akamai.com",
        "user2@akamai.com"
    ],
    "reportTemplate": "THREAT_EVENTS_BY_LOCATION_AND_DOMAIN"
}
Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.

Status 201

Headers:

Location: /etp-report/v1/configs/100/schedules/1027

Get a report schedule

Retrieves the configuration of a specified report schedule.

GET /etp-report/v1/configs/{configId}/schedules/{scheduleId}

Sample: /etp-report/v1/configs/100/schedules/1000

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
scheduleId Integer 1000 A unique identifier for each report schedule configuration.

Status 200 application/json

Response Body:

{
    "scheduleId": 100,
    "recurrence": "WEEKLY",
    "dayOfWeek": "MONDAY",
    "userTimeZone": "+05:30",
    "filters": {
        "isAlert": {
            "in": [
                "true"
            ]
        }
    },
    "status": "ENABLED",
    "reportTemplate": "THREAT_EVENTS_BY_LOCATION_AND_DOMAIN",
    "emails": [
        "user1@akamai.com",
        "user2@akamai.com"
    ],
    "createdBy": "user1",
    "creationDate": "2017-06-22T11:12:55Z",
    "modifiedBy": "user2",
    "modifiedDate": "2017-06-28T11:12:55Z"
}

Update a report schedule

Updates the configuration of a specified report schedule.

PUT /etp-report/v1/configs/{configId}/schedules/{scheduleId}

Sample: /etp-report/v1/configs/100/schedules/1000

Content-Type: application/json

Request Body:

{
    "recurrence": "DAILY",
    "userTimeZone": "+05:30",
    "emails": [
        "user2@akamai.com",
        "user3@akamai.com"
    ],
    "reportTemplate": "THREAT_EVENTS_BY_LOCATION_AND_DOMAIN"
}
Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
scheduleId Integer 1000 A unique identifier for each report schedule configuration.

Status 200

Remove a report schedule

Removes the configuration of a specified report schedule.

DELETE /etp-report/v1/configs/{configId}/schedules/{scheduleId}

Sample: /etp-report/v1/configs/100/schedules/1000

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
scheduleId Integer 1000 A unique identifier for each report schedule configuration.

Status 200

Enable a report schedule

Enables the configuration of a specified report schedule.

POST /etp-report/v1/configs/{configId}/schedules/{scheduleId}/enable

Sample: /etp-report/v1/configs/100/schedules/1000/enable

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
scheduleId Integer 1000 A unique identifier for each report schedule configuration.

Status 200

Disable a report schedule

Disables the configuration of a specified report schedule.

POST /etp-report/v1/configs/{configId}/schedules/{scheduleId}/disable

Sample: /etp-report/v1/configs/100/schedules/1000/disable

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
scheduleId Integer 1000 A unique identifier for each report schedule configuration.

Status 200

Data

Enterprise Threat Protector report JSON data follows these overall conventions:

  • Total responses are arranged as an array of event count data.
  • Detail responses are arranged as an array of event detail data.
  • TimeSeries responses are arranged as an array of time series data.

The data schema tables below list membership requirements as follows:

✓ Member is required to be present, regardless of whether the value is empty or null.
○ Member is optional, and may be omitted in some cases.

Filter

The filter JSON object allows you to specify values of certain data types to include or exclude from your report. You must provide this object as the filter parameter and not in the body of the request. For example, you can target historical config details for a specific domain, while excluding certain actions that are not relevant to the target report data.

Sample GET:

{
   "action":{
      "in":[
         "1"
      ]
   },
   "isAlert":{
      "in":[
         "true"
      ]
   },
   "asn":{
      "in":[
         "24940"
      ]
   },
   "site":{
      "in":[
         "-1"
      ]
   },
   "list":{
      "in":[
         "1"
      ]
   },
   "policy":{
      "in":[
         "164"
      ]
   },
   "category":{
      "in":[
         "1"
      ]
   },
   "domain":{
      "in":[
         "njit.edu."
      ]
   }
}

Filter members

Member Type Description
action String JSON criteria object representing in and not-in clauses for action.
asn String JSON criteria object representing in and not-in clauses for autonomous serial number.
category String JSON criteria object representing in and not-in clauses for category.
country String JSON criteria object representing in and not-in clauses for country.
destinationIp String JSON criteria object representing in and not-in clauses for destination IP.
detectedBy String JSON criteria object representing in and not-in clauses for detected by.
detectionType String JSON criteria object representing in and not-in clauses for detection type.
domain String JSON criteria object representing in and not-in clauses for domain.
list String JSON criteria object representing in and not-in clauses for list.
policy String JSON criteria object representing in and not-in clauses for policy.
site String JSON criteria object representing in and not-in clauses for site. A site ID of -1 points to the roaming location.

Filter.* members

Member Type Description
in Array An array of strings containing unique identifiers for any filter parameter to include in the report.
nin Array An array of strings containing unique identifiers for any filter parameter to exclude in the report.

Download the JSON schemas for this API.

Total

Encapsulates information about an aggregated list of events or traffic for the given time period.

Download schema: total.json

Sample GET:

{
    "id": "564",
    "name": "BOS-HQ-Corp",
    "total": 26
}

Total members

Member Type Description
id String A unique identifier for the column object.
name String A descriptive name for the column identifier.
total Integer The total count of security events for the given time period.

Detail

Encapsulates information about the event details that contains a list of events which can be reported or analyzed.

Download schema: detail.json

Sample GET:

[
    {
        "id": "1",
        "configId": "640",
        "query": {
            "time": "2017-03-23T03:27:00Z",
            "clientIp": "208.114.124.44",
            "dnsIp": "23.216.52.23",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "A",
                    "response": "50.7.146.46",
                    "asn": "174"
                }
            ]
        },
        "event": {
            "detectionTime": "2017-03-23T03:27:34Z",
            "detectionType": "online",
            "siteId": "1401",
            "siteName": "MTN",
            "policyId": "1634",
            "policyName": "Got Honey?",
            "listId": "1",
            "listName": "Malware",
            "trigger": "domain",
            "categoryId": "1",
            "categoryName": "Malware",
            "confidenceId": "Known",
            "actionId": "344",
            "actionName": "Honeypot - BOSTON",
            "description": "Malware targeting Boston"
        }
    }
]

Detail members

Member Type Description
event Detail.event Contains details about an event that occurred as a result of a DNS query.
id Integer A unique identifier for the column object.
query Detail.query The details about the requested DNS query.

Detail.event  

Contains details about an event that occurred as a result of a DNS query.

Member Type Description
actionName String A descriptive name for the action identifier.
categoryName String A descriptive name for the category identifier.
confidenceId String A unique identifier about the event confidence level.
description String A short description of the event.
detectionTime String Event detected time in ISO 8601 format.
detectionType Enumeration Event detected during online or while offline batch processing. Either ONLINE or OFFLINE.
listName String A descriptive name for the list identifier.
policyId String A unique identifier for the policy.
siteId String A unique identifier for the site.
trigger String Event triggered due to domain or IP policy settings.

Detail.query  

The details about the requested DNS query.

Member Type Description
clientIp String The requesting client’s IP address.
dnsIp String The DNS resolver IP address.
domain String The requested domain address.
queryType String The DNS query type.
resolved Detail.query.resolved[] The details about the requested DNS query resolution.
time String Time of DNS request in ISO 8601 format.

Detail.query.resolved[]  

The details about the requested DNS query resolution.

Member Type Description
asn String Autonomous system number used for resolution.
response String Resolved domain or IP address.
type String DNS resolution type. For example: A or CNAME

TimeSeries

Encapsulates information about time series that lists hourly events which can be reported or analyzed.

Download schema: time-series.json

Sample GET:

{
    "columns": [
        {
            "id": "TIMESTAMP",
            "name": "TIMESTAMP"
        },
        {
            "id": "1",
            "name": "Malware"
        },
        {
            "id": "3",
            "name": "C&C"
        },
        {
            "id": "2441",
            "name": "DeadStream"
        },
        {
            "id": "OTHERS",
            "name": "OTHERS"
        }
    ],
    "rows": [
        [
            "2017-03-22T10:00:00Z",
            0,
            3,
            0,
            0
        ],
        [
            "2017-03-22T12:00:00Z",
            2,
            0,
            0,
            0
        ],
        [
            "2017-03-22T14:00:00Z",
            15,
            0,
            0,
            0
        ]
    ]
}

TimeSeries members

Member Type Description
columns Array Each column object contains a unique identifier and name.
rows Array Array of arrays corresponding to table rows and columns. Within each row, the first value represents the ISO 8601 timestamp, and subsequent values represent numeric data for each column

Information

Provides registration details for a domain.

Download schema: ioc-information.json

Sample GET:

{
    "record": "00005ik.rcomhost.com.",
    "recordType": "DOMAIN",
    "description": "Locky Ransomware distribution site",
    "registrarName": "NETWORK SOLUTIONS, LLC.",
    "registrantName": "LLC, networksolutions",
    "registrantOrganization": "Network Solutions LLC",
    "registrantCity": "HERNDON",
    "registrantState": "VA",
    "registrantEmails": [
        "Domains@web.com"
    ],
    "nameServerNames": [
        "NS45.WORLDNIC.COM",
        "NS46.WORLDNIC.COM"
    ],
    "registrantAddress": "HERNDON",
    "registrantCountry": "UNITED STATES",
    "whoisServer": "whois.networksolutions.com",
    "createdDate": "2012-01-25T00:00:00Z",
    "lastModifiedDate": "2014-02-26T00:00:00Z"
}

Information members

Member Type Description
category Information.category[] Lists category information for a domain or IP.
contestInformations Information.contestInformations[] Contains information and details on contest actions for a domain.
createDate String The registration date of the domain in ISO 8601 format.
description String A description of the record.
expiryDate String The expiration date of the domain registration in ISO 8601 format.
lastModifiedDate String The last modified date of the domain in ISO 8601 format.
nameServerIPs Array A list of name server IP addresses for a domain.
nameServerNames Array A list of name servers for a domain.
record String The name of the record.
recordType Enumeration Specifies the type of record. Either DOMAIN or IP.
registrantAddress String The address of the domain registrant.
registrantCountry String The country of the domain registrant.
registrantEmails Array A list of email addresses associated with the domain registrant.
registrantName String The name of the domain registrant.
registrarName String The name of the domain registrar.

Information.category[]  

Lists category information for a domain or IP.

Member Type Description
categoryId String A unique identifier for the category.
categoryName String The name of the category.
confidenceId Enumeration The confidence level of the list entry. Either SUSPECTED or KNOWN.
listId String A unique identifier for the list.

Information.contestInformations[]  

Contains information and details on contest actions for a domain.

Member Type Description
actionTaken String A description of the actions taken to resolve the contest.
contestedOn String The time of contest in ISO 8601 format.
contestId String A unique identifier for the contest.
contestReason String A description of the reason for the contest.

Changes

Provides a list of IOC changes.

Download schema: changes.json

Sample GET:

[
    {
        "recordType": "DOMAIN",
        "date": "2017-03-07T00:00:00Z",
        "state": "ADDED",
        "description": "First tracked"
    },
    {
        "recordType": "DOMAIN",
        "date": "2017-03-07T00:00:00Z",
        "state": "CHANGED",
        "description": "Severity upgraded from Unknown to Suspected Malware",
        "key": "CONFIDENCE",
        "oldValue": "Unknown",
        "newValue": "Suspected",
        "listId": "1",
        "listName": "Malware"
    }
]

Changes members

Member Type Description
date String The date of the change in ISO 8601 format.
description String A description of the change made.
key String The name of the key that changed.
listId String A unique identifier for the list the domain is assigned to.
listName String The name of the list that the domain is assigned to.
newValue String The new value of the key.
oldValue String The previous value of the key.
recordType Enumeration Specifies the type of record. Either DOMAIN or IP.
state Enumeration The state of the change made. Possible values are ADDED, CHANGED, REMOVED, and DELETED.

ReportSchedule

Contains configuration to schedule reoccurring reports on a daily or weekly basis.

Download schema: report-schedule.json

Sample GET:

{
    "scheduleId": 100,
    "recurrence": "WEEKLY",
    "dayOfWeek": "MONDAY",
    "userTimeZone": "+05:30",
    "filters": {
        "isAlert": {
            "in": [
                "true"
            ]
        }
    },
    "status": "ENABLED",
    "reportTemplate": "THREAT_EVENTS_BY_LOCATION_AND_DOMAIN",
    "emails": [
        "user1@akamai.com",
        "user2@akamai.com"
    ],
    "createdBy": "user1",
    "creationDate": "2017-06-22T11:12:55Z",
    "modifiedBy": "user2",
    "modifiedDate": "2017-06-28T11:12:55Z"
}

ReportSchedule members

Member Type Description
createdBy String Identifies the user who initially created the report schedule configuration.
createdDate String ISO–8601 timestamp string indicating when the report schedule configuration was initially created.
dayOfWeek Enumeration, Null Specifies the day of the week the report generates, either MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY, SATURDAY, or SUNDAY. Only used when recurrence is set to WEEKLY, otherwise null.
emails Array Specifies the email addresses to send generated reports.
filters Object, Null Specifies filters to apply while generating the report. See the Filter object type.
modifiedBy String Identifies the last user who modified the report schedule configuration.
modifiedDate String ISO–8601 timestamp string indicating when the report schedule configuration was last modified.
recurrence Enumeration Specifies the frequency of the report schedule, either DAILY, or WEEKLY.
reportTemplate Enumeration Specifies the report template (representational-structure). Set to THREAT_EVENTS_BY_LOCATION_AND_DOMAIN.
scheduleId Integer A unique identifier for the report schedule configuration.
status Enumeration Specifies the status of the report schedule configuration, either ENABLED or DISABLED.
userTimeZone String Specifies a user-timezone-offset for generating the report. For example, -05:00

Errors

This section provides details on the data object that reflects the API’s common response to error cases, and lists the API’s range of response status codes for both error and success cases.

Error responses

The API responds with HTTP Problem error objects that provide details useful for debugging. For example:

{
    "type": "https://problems.omni.akamaiapis.net/http/forbidden",
    "title": "Forbidden",
    "detail": "Insufficient permissions. Code-01",
    "status": 403,
    "instance": "3e3f11da-e205-409a-be77-24e459f29fa8"
}

HTTP status codes

The API produces the following set of HTTP status codes for both success and failure scenarios:

Code Description
200 The operation was successful.
403 Access is forbidden.
404 Resource not found.

Last modified: 4/18/2018