Enterprise Threat Protector Reporting API Resources

This section provides details on the API’s various operations.

The following list provides a road map of all the conceptual objects you deal with when interacting with the Enterprise Threat Protector (ETP) Reporting API, and provides pointers to where you can learn more.

  • Configuration ID: When you sign up for ETP, you receive a configuration and associated ID. You need to use this parameter for all operations in the ETP Reporting API. See List Configurations in the ETP Configuration API to obtain this value.

  • Threat Event: Threat events provide details on a detected or blocked threat, as directed by your custom ETP security lists. You can look at traffic details to gain insight on malicious websites or phishing campaigns.

  • AUP Event: AUP events provide details on a detected or blocked threat, as directed by the acceptable use policy assigned to your location. You can investigate false positives or provide additional details on why a specific page was blocked.

  • DNS Events: DNS Events provide details on detected threats when accessing a malicious domain. ETP then on-ramps the traffic to Nevada for further analysis.

  • DNS Activity: DNS activities lists the total number of DNS requests ETP serves on your behalf.

  • Security Connector Events: Security Connecter events provide details on malicious or suspicious traffic that ETP routes to a sinkhole device per the policy configuration. ETP collects information about the user device or machine that made the request, such as the internal IP address of the end user’s machine. This information allows you or an IT administrator to identify compromised machines in your network.

  • Indicator of Compromise (IOC) Analysis: You can use IOC API data to analyze blacklisted domains. This API provides information on the domain tree, domain registration, and historical record changes. See the Information and Changes object types.

  • Totals Report: This object lists categories and the total count of events for a category. See the Totals object type.

  • Details Report: This object provides a table view of event entries and relevant ETP configuration data. You can provide additional details on an action taken or use the information to research similar events. See the Details object type.

  • Time Series Report: This object lists a time series of event totals at a one hour granularity. See the TimeSeries object type.

  • Dimension: The Total and Time Series reports provide the dimension request parameter, which filters report data for a valid enumerated value. Operations support a single ENUM value in a request URL. If you don’t include optional parameter in the request URL, the response returns a single total for the default time period (30 days). See details about each operation’s parameters for more information.

  • Filters: You can filter report data by crafting a Filter object, supplied in the operation URL. You specify filter values to either include or exclude data from the report. You can add multiple filter entries and values to further parse report data. See the Filter object type.

  • Report Schedules: You can configure ETP to schedule and generate a report with alert information or information related to all events that occurred in a specified time frame. You can schedule a report to run on a daily basis or on specific days of the week. See the ReportSchedule object type.

API Summary

Download the RAML descriptors for this API.

Operation Method Endpoint
Threat Event Report  
Report Threat Event Details GET /etp-report/v1/configs/{configId}/threat-events/details{?startTimeSec,endTimeSec,filters}
Report Threat Event Totals GET /etp-report/v1/configs/{configId}/threat-events/aggregate{?startTimeSec,dimension,endTimeSec,filters}
Report Threat Event Time Series GET /etp-report/v1/configs/{configId}/threat-events/time-series{?startTimeSec,dimension,endTimeSec,filters}
AUP Event Report  
Report AUP Event Details GET /etp-report/v1/configs/{configId}/aup-events/details{?startTimeSec,endTimeSec,filters}
Report AUP Event Totals GET /etp-report/v1/configs/{configId}/aup-events/aggregate{?startTimeSec,dimension,endTimeSec,filters}
Report AUP Event Time Series GET /etp-report/v1/configs/{configId}/aup-events/time-series{?startTimeSec,dimension,endTimeSec,filters}
DNS Activity Report  
Report DNS Activity Aggregate GET /etp-report/v1/configs/{configId}/dns-activities/aggregate{?startTimeSec,dimension,endTimeSec,filters}
Report DNS Activity Time Series GET /etp-report/v1/configs/{configId}/dns-activities/time-series{?startTimeSec,dimension,endTimeSec,filters}
Security Connector Event Report  
Report Security Connector Event Details GET /etp-report/v2/configs/{configId}/sinkhole-events/details{?startTimeSec,endTimeSec,filters}
Report Security Connector Event Totals GET /etp-report/v2/configs/{configId}/sinkhole-events/aggregate{?startTimeSec,dimension,endTimeSec,filters}
Report Security Connector Event Time Series GET /etp-report/v2/configs/{configId}/sinkhole-events/time-series{?startTimeSec,dimension,endTimeSec,filters}
IOC  
Report IOC Domain Tree GET /etp-report/v1/ioc/domain-tree{?record,recordType}
Report IOC Information GET /etp-report/v1/ioc/information{?record,recordType}
Report IOC Changes GET /etp-report/v1/ioc/changes{?startTimeSec,record,endTimeSec,recordType}
Report IOC Configuration Time Series GET /etp-report/v1/configs/{configId}/ioc/time-series{?startTimeSec,record,endTimeSec,recordType}
Report Schedule  
List Report Schedules GET /etp-report/v1/configs/{configId}/schedules
Create a Report Schedule POST /etp-report/v1/configs/{configId}/schedules
Get a Report Schedule GET /etp-report/v1/configs/{configId}/schedules/{scheduleId}
Update a Report Schedule PUT /etp-report/v1/configs/{configId}/schedules/{scheduleId}
Remove a Report Schedule DELETE /etp-report/v1/configs/{configId}/schedules/{scheduleId}
Enable a Report Schedule POST /etp-report/v1/configs/{configId}/schedules/{scheduleId}/enable
Disable a Report Schedule POST /etp-report/v1/configs/{configId}/schedules/{scheduleId}/disable

Report Threat Event Details

Retrieves the raw events for the an ETP configuration for a given time period.

GET /etp-report/v1/configs/{configId}/threat-events/details{?startTimeSec,endTimeSec,filters}

Sample: /etp-report/v1/configs/100/threat-events/details?startTimeSec=1333631700&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

[
    {
        "id": "1",
        "configId": "640",
        "query": {
            "time": "2017-03-23T03:27:00Z",
            "clientIp": "208.114.124.44",
            "dnsIp": "23.216.52.23",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "A",
                    "response": "50.7.146.46",
                    "asn": "174"
                }
            ]
        },
        "event": {
            "detectionTime": "2017-03-23T03:27:34Z",
            "detectionType": "online",
            "siteId": "1401",
            "siteName": "MTN",
            "policyId": "1634",
            "policyName": "Got Honey?",
            "listId": "1",
            "listName": "Malware",
            "trigger": "domain",
            "categoryId": "1",
            "categoryName": "Malware",
            "confidenceId": "Known",
            "actionId": "344",
            "actionName": "Honeypot - BOSTON",
            "description": "Malware targeting Boston"
        }
    }
]

Status 200 text/csv

Response Body:

# domain: cmu.edu.
query_time,client_ip,dns_ip,domain,resolved_ip,query_type,detection_time,detection_type,location_name,policy_name,list_name,trigger,category_name,confidence_id,action_name,description
2017-06-05T09:10:22.978,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-05T09:10:22.978,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-05T09:09:16.144,198.18.179.244,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-05T09:09:16.144,online,Off Network ETP Clients,Ubuntu Policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-05T09:09:02.76,198.18.179.244,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-05T09:09:02.76,online,Off Network ETP Clients,Ubuntu Policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-05T09:09:02.721,198.18.179.244,100.74.32.3,cmu.edu.,N/A,AAAA,2017-06-05T09:09:02.721,online,Off Network ETP Clients,Ubuntu Policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.102,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.102,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.094,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.094,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.086,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.086,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.079,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.079,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.071,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.071,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.063,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.063,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.055,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.055,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.047,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.047,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.04,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.04,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.032,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.032,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.025,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.025,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.017,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.017,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.009,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.009,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:58.002,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:58.002,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.994,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.994,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.986,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.986,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.978,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.978,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.971,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.971,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.963,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.963,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.956,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.956,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.948,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.948,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.941,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.941,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.933,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.933,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.926,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.926,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.918,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.918,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.91,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.91,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.902,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.902,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.884,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.884,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.877,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.877,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.869,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.869,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.861,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.861,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.853,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.853,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.845,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.845,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.838,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.838,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.83,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.83,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.823,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.823,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.815,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.815,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.808,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.808,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.8,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.8,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.792,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.792,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.785,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.785,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.777,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.777,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.77,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.77,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.762,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.762,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.755,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.755,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.747,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.747,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.74,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.74,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.732,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.732,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.725,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.725,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:27:57.639,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:27:57.639,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.647,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.647,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.641,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.641,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.635,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.635,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.63,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.63,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.624,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.624,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.617,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.617,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.612,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.612,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.606,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.606,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.6,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.6,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.594,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.594,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.589,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.589,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.583,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.583,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.577,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.577,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.571,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.571,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.566,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.566,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.56,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.56,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.554,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.554,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.549,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.549,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.543,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.543,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.537,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.537,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.531,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.531,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.525,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.525,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.52,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.52,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.514,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.514,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.508,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.508,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.502,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.502,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.497,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.497,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.491,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.491,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.486,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.486,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.48,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.48,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.474,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.474,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.468,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.468,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.462,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.462,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.456,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.456,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.45,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.45,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.445,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.445,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.439,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.439,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.433,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.433,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.428,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.428,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.422,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.422,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.416,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.416,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.41,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.41,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.404,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.404,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.399,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.399,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.393,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.393,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.387,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.387,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.381,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.381,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.376,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.376,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.369,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.369,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:40.362,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:40.362,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.271,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.271,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.263,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.263,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.256,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.256,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.248,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.248,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.24,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.24,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.232,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.232,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.224,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.224,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.216,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.216,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.209,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.209,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.201,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.201,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.193,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.193,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.185,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.185,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.177,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.177,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.169,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.169,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.161,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.161,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.154,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.154,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.146,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.146,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.138,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.138,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.13,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.13,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.122,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.122,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.114,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.114,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.107,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.107,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.099,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.099,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.091,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.091,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.083,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.083,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.075,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.075,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.068,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.068,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.06,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.06,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.052,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.052,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.045,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.045,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.037,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.037,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.03,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.03,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.022,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.022,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.014,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.014,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:38.006,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:38.006,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.998,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.998,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.99,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.99,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.974,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.974,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.966,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.966,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.958,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.958,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.951,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.951,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.943,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.943,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.935,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.935,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.928,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.928,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.92,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.92,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.913,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.913,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.905,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.905,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.897,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.897,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.889,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.889,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T16:00:37.881,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T16:00:37.881,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.644,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.644,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.639,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.639,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.633,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.633,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.627,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.627,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.621,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.621,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.615,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.615,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.61,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.61,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.604,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.604,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.598,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.598,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.591,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.591,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.585,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.585,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.579,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.579,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.573,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.573,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.567,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.567,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.561,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.561,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.555,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.555,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.549,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.549,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.544,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.544,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.538,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.538,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.532,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.532,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.526,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.526,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.52,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.52,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.515,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.515,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.509,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.509,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.503,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.503,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.498,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.498,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.492,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.492,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.486,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.486,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.481,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.481,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.475,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.475,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.469,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.469,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.463,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.463,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.457,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.457,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.451,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.451,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.446,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.446,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.44,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.44,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.434,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.434,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.428,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.428,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.422,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.422,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.416,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.416,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.411,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.411,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.405,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.405,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.399,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.399,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.393,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.393,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.387,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.387,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.382,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.382,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.376,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.376,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.37,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.37,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.364,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.364,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:17.356,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:17.356,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.525,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.525,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.517,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.517,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.51,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.51,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.502,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.502,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.494,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.494,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.486,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.486,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.478,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.478,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.47,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.47,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.463,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.463,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.455,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.455,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.448,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.448,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.44,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.44,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.432,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.432,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.425,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.425,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.416,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.416,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.409,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.409,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.401,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.401,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.393,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.393,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.386,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.386,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.378,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.378,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.371,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.371,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.363,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.363,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.356,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.356,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.348,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.348,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.341,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.341,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.333,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.333,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.326,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.326,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.318,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.318,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.31,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.31,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.302,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.302,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.294,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.294,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.286,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.286,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.279,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.279,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.272,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.272,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.264,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.264,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.256,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.256,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.249,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.249,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.241,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.241,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.234,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.234,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.226,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.226,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.218,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.218,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.211,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.211,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.203,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.203,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.195,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.195,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.188,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.188,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.18,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.18,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.172,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.172,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.164,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.164,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.157,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.157,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:25:13.069,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:25:13.069,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.087,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.087,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.08,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.08,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.072,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.072,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.064,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.064,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.056,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.056,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.048,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.048,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.041,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.041,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.032,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.032,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.024,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.024,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.017,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.017,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.009,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.009,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:12.001,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:12.001,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.993,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.993,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.985,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.985,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.978,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.978,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.97,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.97,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.962,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.962,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.954,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.954,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.947,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.947,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.939,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.939,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.931,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.931,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.923,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.923,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.915,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.915,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.908,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.908,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.9,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.9,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.892,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.892,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.884,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.884,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.876,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.876,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.869,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.869,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.861,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.861,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.853,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.853,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.845,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.845,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.837,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.837,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.83,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.83,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.823,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.823,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.815,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.815,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.807,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.807,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.799,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.799,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.79,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.79,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.782,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.782,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.774,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.774,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.766,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.766,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.759,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.759,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.751,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.751,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.742,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.742,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.735,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.735,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.726,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.726,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.719,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.719,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.711,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.711,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:11.703,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:11.703,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.911,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.911,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.905,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.905,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.899,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.899,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.893,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.893,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.887,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.887,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.881,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.881,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.875,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.875,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.869,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.869,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.863,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.863,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.857,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.857,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.85,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.85,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.844,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.844,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.839,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.839,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.833,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.833,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.827,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.827,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.82,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.82,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.814,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.814,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.807,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.807,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.801,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.801,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.794,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.794,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.788,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.788,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.782,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.782,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.776,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.776,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.77,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.77,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.764,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.764,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.758,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.758,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.751,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.751,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.746,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.746,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.74,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.74,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.734,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.734,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.728,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.728,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.722,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.722,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.716,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.716,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.711,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.711,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.705,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.705,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.699,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.699,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.693,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.693,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.687,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.687,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.681,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.681,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.675,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.675,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.669,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.669,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.664,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.664,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.658,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.658,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.651,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.651,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.645,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.645,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.639,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.639,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.633,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.633,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.628,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.628,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.622,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.622,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:19:08.616,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:19:08.616,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:54.937,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:54.937,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.108,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.108,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.1,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.1,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.093,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.093,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.085,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.085,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.077,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.077,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.069,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.069,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.061,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.061,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.053,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.053,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.045,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.045,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.038,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.038,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.03,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.03,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.022,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.022,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.014,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.014,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:52.007,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:52.007,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.999,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.999,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.991,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.991,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.983,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.983,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.974,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.974,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.967,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.967,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.96,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.96,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.952,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.952,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.944,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.944,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.937,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.937,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.929,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.929,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.92,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.92,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.913,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.913,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.905,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.905,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.897,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.897,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.89,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.89,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.882,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.882,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.874,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.874,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.866,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.866,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.858,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.858,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.848,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.848,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.841,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.841,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.832,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.832,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.823,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.823,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.814,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.814,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.807,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.807,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.799,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.799,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.791,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.791,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.784,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.784,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.776,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.776,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.769,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.769,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.761,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.761,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.754,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.754,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.746,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.746,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.738,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.738,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.73,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.73,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T15:18:51.723,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T15:18:51.723,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.486,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.486,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.479,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.479,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.471,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.471,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.463,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.463,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.456,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.456,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.448,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.448,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.44,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.44,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.433,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.433,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.425,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.425,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.418,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.418,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.41,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.41,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.402,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.402,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.395,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.395,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.387,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.387,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.379,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.379,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.372,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.372,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.364,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.364,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.356,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.356,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.349,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.349,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.341,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.341,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.334,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.334,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.326,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.326,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.318,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.318,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.311,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.311,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.303,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.303,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.295,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.295,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.288,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.288,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.28,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.28,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.273,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.273,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.266,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.266,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.258,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.258,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.251,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.251,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.243,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.243,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.235,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.235,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.228,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.228,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.22,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.22,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.213,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.213,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.205,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.205,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.197,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.197,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.19,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.19,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.182,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.182,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.175,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.175,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.167,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.167,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.159,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.159,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.152,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.152,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.144,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.144,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.137,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.137,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.129,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.129,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.121,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.121,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:50:38.112,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:50:38.112,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:47.487,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:47.487,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:47.279,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:47.279,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:47.055,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:47.055,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:46.83,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:46.83,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:46.607,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:46.607,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:46.335,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:46.335,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:44.992,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:44.992,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:44.784,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:44.784,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:44.513,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:44.513,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:43.728,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:43.728,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:43.489,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:43.489,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:43.264,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:43.264,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:43.009,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:43.009,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:42.688,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:42.688,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:42.273,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:42.273,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:41.792,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:41.792,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:41.312,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:41.312,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:40.787,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:40.787,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:39.792,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:39.792,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:39.041,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:39.041,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:17.953,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:17.953,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:17.312,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:17.312,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:16.771,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:16.771,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:15.494,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:15.494,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:14.682,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:14.682,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:12.928,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:12.928,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:11.104,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:11.104,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:06.402,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:06.402,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:06.162,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:06.162,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:05.921,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:05.921,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:05.635,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:05.635,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:05.345,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:05.345,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:05.109,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:05.109,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:04.817,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:04.817,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:02.8,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:02.8,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:02.544,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:02.544,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:02.24,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:02.24,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:01.97,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:01.97,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:01.744,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:01.744,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:49:01.488,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:49:01.488,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:59.873,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:59.873,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:59.633,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:59.633,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:59.427,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:59.427,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:59.218,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:59.218,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:58.898,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:58.898,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:58.498,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:58.498,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:58.066,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:58.066,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:56.464,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:56.464,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:56,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:56,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:55.553,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:55.553,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:55.072,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:55.072,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:54.576,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:54.576,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:53.472,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:53.472,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:44.275,198.18.179.85,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:44.275,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:48:38.77,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:48:38.77,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:41:48.818,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:41:48.818,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:40:58.26,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:40:58.26,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:35:20.147,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:35:20.147,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:55.94,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:55.94,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:55.045,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:55.045,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:30.936,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:30.936,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:29.941,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:29.941,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:29.719,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:29.719,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:29.498,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:29.498,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:29.269,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:29.269,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:29.061,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:29.061,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:28.837,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:28.837,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:28.598,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:28.598,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:28.31,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:28.31,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:27.077,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:27.077,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:26.885,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:26.885,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:26.662,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:26.662,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:26.294,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:26.294,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:25.932,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:25.932,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:25.174,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:25.174,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:24.971,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:24.971,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:24.694,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:24.694,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:24.118,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:24.118,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:23.91,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:23.91,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:23.686,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:23.686,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:23.462,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:23.462,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:23.237,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:23.237,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:22.79,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:22.79,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:22.582,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:22.582,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:22.374,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:22.374,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:22.166,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:22.166,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:21.926,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:21.926,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:21.702,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:21.702,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:21.462,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:21.462,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:21.222,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:21.222,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:20.949,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:20.949,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:20.662,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:20.662,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:20.374,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:20.374,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:19.494,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:19.494,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:19.174,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:19.174,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:30:18.454,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:30:18.454,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:29:56.57,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:29:56.57,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:29:50.039,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:29:50.039,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:24:15.041,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:24:15.041,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:24:06.098,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:24:06.098,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:22:20.968,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:22:20.968,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:22:13.417,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:22:13.417,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:16:14.737,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:16:14.737,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:16:13.953,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:16:13.953,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:15:24.531,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:15:24.531,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:15:23.989,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:15:23.989,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:15:00.724,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:15:00.724,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:06:19.06,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:06:19.06,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:02:10.316,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:02:10.316,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:02:09.465,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:02:09.465,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:01:45.439,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:01:45.439,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:01:28.767,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:01:28.767,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None
2017-06-02T14:00:54.477,198.18.179.83,100.74.32.3,cmu.edu.,128.2.42.10,A,2017-06-02T14:00:54.477,online,Sarah Ubuntu location,Mac policy,Blacklist,domain,Blacklist,Confirmed,Deny,None

Report Threat Event Totals

Lists the count of threat events, grouped for a given granularity.

GET /etp-report/v1/configs/{configId}/threat-events/aggregate{?startTimeSec,dimension,endTimeSec,filters}

Sample: /etp-report/v1/configs/100/threat-events/aggregate?startTimeSec=1333631700&dimension=site&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
dimension Enumeration site Optionally filter by a dimension of data, either ACTION, ALERTS, ASN, CATEGORY, DOMAIN, LIST, POLICY, SITE, or DESTINATIONIP.
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

[
    {
        "id": "564",
        "name": "BOS-HQ-Corp",
        "total": 26
    },
    {
        "id": "1220",
        "name": "BOS-15S-Corp",
        "total": 10
    },
    {
        "id": "-1",
        "name": "Roaming",
        "total": 7
    },
    {
        "id": "841",
        "name": "DUB-1DL-Corp+Guest",
        "total": 7
    },
    {
        "id": "840",
        "name": "BOS-HQ-Guest",
        "total": 2
    }
]

Report Threat Event Time Series

Retrieves a list of threat event totals, aggregated by hour.

GET /etp-report/v1/configs/{configId}/threat-events/time-series{?startTimeSec,dimension,endTimeSec,filters}

Sample: /etp-report/v1/configs/100/threat-events/time-series?startTimeSec=1333631700&dimension=list&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
dimension Enumeration list Optionally filter by a dimension of data, either ACTION, ALERTS, ASN, CATEGORY, DOMAIN, LIST, POLICY, SITE, or DESTINATIONIP.
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

{
    "columns": [
        {
            "id": "TIMESTAMP",
            "name": "TIMESTAMP"
        },
        {
            "id": "1",
            "name": "Malware"
        },
        {
            "id": "3",
            "name": "C&C"
        },
        {
            "id": "2441",
            "name": "DeadStream"
        },
        {
            "id": "OTHERS",
            "name": "OTHERS"
        }
    ],
    "rows": [
        [
            "2017-03-22T10:00:00Z",
            0,
            3,
            0,
            0
        ],
        [
            "2017-03-22T12:00:00Z",
            2,
            0,
            0,
            0
        ],
        [
            "2017-03-22T14:00:00Z",
            15,
            0,
            0,
            0
        ]
    ]
}

Report AUP Event Details

Retrieves the raw AUP events of an ETP configuration for a given time period. This operation retrieves the first 500 configurable results.

GET /etp-report/v1/configs/{configId}/aup-events/details{?startTimeSec,endTimeSec,filters}

Sample: /etp-report/v1/configs/100/aup-events/details?startTimeSec=1333631700&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

[
    {
        "id": 1,
        "query": {
            "time": "2016-05-03T18:24:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-03T18:24:17Z",
            "detectionType": "offline",
            "siteId": "Cambridge",
            "policyId": "Sales Offices",
            "listName": "DGA",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 2,
        "query": {
            "time": "2016-05-03T18:53:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-03T18:53:05Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "US policy",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 3,
        "query": {
            "time": "2016-05-03T19:21:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-03T19:21:53Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "Sales Offices",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 4,
        "query": {
            "time": "2016-05-03T19:50:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-03T19:50:41Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "Corp policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Suspected",
            "actionId": "None",
            "description": "Violence"
        }
    },
    {
        "id": 5,
        "query": {
            "time": "2016-05-03T20:19:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-03T20:19:29Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "Corp Policy",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Suspected",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 6,
        "query": {
            "time": "2016-05-03T20:48:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-03T20:48:17Z",
            "detectionType": "offline",
            "siteId": "Remote site",
            "policyId": "US policy",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 7,
        "query": {
            "time": "2016-05-03T21:17:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-03T21:17:05Z",
            "detectionType": "offline",
            "siteId": "Remote site",
            "policyId": "Corp policy",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionId": "None",
            "description": "Violence"
        }
    },
    {
        "id": 8,
        "query": {
            "time": "2016-05-03T21:45:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "EGP-TESTOR"
                },
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "DNIC-AS-00096"
                }
            ]
        },
        "event": {
            "detectionTime": "2016-05-03T21:45:53Z",
            "detectionType": "offline",
            "siteId": "Remote site#2",
            "policyId": "Sales Offices",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 9,
        "query": {
            "time": "2016-05-03T22:14:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "EGP-TESTOR"
                },
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "DNIC-AS-00096"
                }
            ]
        },
        "event": {
            "detectionTime": "2016-05-03T22:14:41Z",
            "detectionType": "offline",
            "siteId": "Cambridge",
            "policyId": "Remote Users",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 10,
        "query": {
            "time": "2016-05-03T22:43:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "EGP-TESTOR"
                },
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "DNIC-AS-00096"
                }
            ]
        },
        "event": {
            "detectionTime": "2016-05-03T22:43:29Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "US policy",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 11,
        "query": {
            "time": "2016-05-03T23:12:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "EGP-TESTOR"
                },
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "DNIC-AS-00096"
                }
            ]
        },
        "event": {
            "detectionTime": "2016-05-03T23:12:17Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "Sales Offices",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 12,
        "query": {
            "time": "2016-05-03T23:41:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "EGP-TESTOR"
                },
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "DNIC-AS-00096"
                }
            ]
        },
        "event": {
            "detectionTime": "2016-05-03T23:41:05Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "Remote Users",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 13,
        "query": {
            "time": "2016-05-04T00:09:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "EGP-TESTOR"
                },
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "DNIC-AS-00096"
                }
            ]
        },
        "event": {
            "detectionTime": "2016-05-04T00:09:53Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "Corp Policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 14,
        "query": {
            "time": "2016-05-04T00:38:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "EGP-TESTOR"
                },
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "DNIC-AS-00096"
                }
            ]
        },
        "event": {
            "detectionTime": "2016-05-04T00:38:41Z",
            "detectionType": "offline",
            "siteId": "Remote site#2",
            "policyId": "US policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 15,
        "query": {
            "time": "2016-05-04T01:07:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A",
            "resolved": [
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "EGP-TESTOR"
                },
                {
                    "type": "responseType",
                    "response": "79.224.4.133",
                    "asn": "DNIC-AS-00096"
                }
            ]
        },
        "event": {
            "detectionTime": "2016-05-04T01:07:29Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "US policy",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 16,
        "query": {
            "time": "2016-05-04T01:36:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T01:36:17Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "Corp policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Suspected",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 17,
        "query": {
            "time": "2016-05-04T02:05:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T02:05:05Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "Corp policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Known",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 18,
        "query": {
            "time": "2016-05-04T02:33:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T02:33:53Z",
            "detectionType": "offline",
            "siteId": "Remote site",
            "policyId": "US policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 19,
        "query": {
            "time": "2016-05-04T03:02:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T03:02:41Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "US policy",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Adult",
            "confidenceId": "Known",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 20,
        "query": {
            "time": "2016-05-04T03:31:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T03:31:29Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "US policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 21,
        "query": {
            "time": "2016-05-04T04:00:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T04:00:17Z",
            "detectionType": "offline",
            "siteId": "Cambridge",
            "policyId": "US policy",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Suspected",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 22,
        "query": {
            "time": "2016-05-04T04:29:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T04:29:05Z",
            "detectionType": "offline",
            "siteId": "Cambridge",
            "policyId": "US policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Adult",
            "confidenceId": "Suspected",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 23,
        "query": {
            "time": "2016-05-04T04:57:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T04:57:53Z",
            "detectionType": "offline",
            "siteId": "Remote site#2",
            "policyId": "Corp policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Known",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 24,
        "query": {
            "time": "2016-05-04T05:26:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T05:26:41Z",
            "detectionType": "offline",
            "siteId": "Cambridge",
            "policyId": "Remote Users",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Suspected",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 25,
        "query": {
            "time": "2016-05-04T05:55:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T05:55:29Z",
            "detectionType": "offline",
            "siteId": "Cambridge",
            "policyId": "US policy",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Suspected",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 26,
        "query": {
            "time": "2016-05-04T06:24:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T06:24:17Z",
            "detectionType": "offline",
            "siteId": "Remote site",
            "policyId": "Corp policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Adult",
            "confidenceId": "Known",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 27,
        "query": {
            "time": "2016-05-04T06:53:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T06:53:05Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "Corp policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Suspected",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 28,
        "query": {
            "time": "2016-05-04T07:21:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T07:21:53Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "Remote Users",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Known",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 29,
        "query": {
            "time": "2016-05-04T07:50:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T07:50:41Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "Remote Users",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Suspected",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 30,
        "query": {
            "time": "2016-05-04T08:19:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T08:19:29Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "US policy",
            "listName": "Command and Control",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 31,
        "query": {
            "time": "2016-05-04T08:48:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T08:48:17Z",
            "detectionType": "offline",
            "siteId": "Remote site#2",
            "policyId": "Corp Policy",
            "listName": "DGA",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 32,
        "query": {
            "time": "2016-05-04T09:17:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T09:17:05Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "Remote Users",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Suspected",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 33,
        "query": {
            "time": "2016-05-04T09:45:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T09:45:53Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "US policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Suspected",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 34,
        "query": {
            "time": "2016-05-04T10:14:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T10:14:41Z",
            "detectionType": "offline",
            "siteId": "Remote site#2",
            "policyId": "Remote Users",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Suspected",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 35,
        "query": {
            "time": "2016-05-04T10:43:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T10:43:29Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "US policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Suspected",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 36,
        "query": {
            "time": "2016-05-04T11:12:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T11:12:17Z",
            "detectionType": "offline",
            "siteId": "Cambridge",
            "policyId": "US policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 37,
        "query": {
            "time": "2016-05-04T11:41:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T11:41:05Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "Sales Offices",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Suspected",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 38,
        "query": {
            "time": "2016-05-04T12:09:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T12:09:53Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "Sales Offices",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Adult",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 39,
        "query": {
            "time": "2016-05-04T12:38:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T12:38:41Z",
            "detectionType": "offline",
            "siteId": "Remote site",
            "policyId": "US policy",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 40,
        "query": {
            "time": "2016-05-04T13:07:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T13:07:29Z",
            "detectionType": "offline",
            "siteId": "Remote site#2",
            "policyId": "Corp Policy",
            "listName": "Command and Control",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Suspected",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 41,
        "query": {
            "time": "2016-05-04T13:36:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T13:36:17Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "Sales Offices",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Firearms",
            "confidenceId": "Known",
            "actionId": "None",
            "description": "Violence"
        }
    },
    {
        "id": 42,
        "query": {
            "time": "2016-05-04T14:05:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T14:05:05Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "US policy",
            "listName": "DGA",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 43,
        "query": {
            "time": "2016-05-04T14:33:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T14:33:53Z",
            "detectionType": "offline",
            "siteId": "Remote site#2",
            "policyId": "Corp Policy",
            "listName": "Customer Phishing",
            "trigger": "domain",
            "categoryName": "Adult",
            "confidenceId": "Known",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 44,
        "query": {
            "time": "2016-05-04T15:02:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T15:02:41Z",
            "detectionType": "offline",
            "siteId": "Remote site",
            "policyId": "Corp Policy",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "Customer Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 45,
        "query": {
            "time": "2016-05-04T15:31:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T15:31:29Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "Sales Offices",
            "listName": "Command and Control",
            "trigger": "domain",
            "categoryName": "Gambling",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 46,
        "query": {
            "time": "2016-05-04T16:00:17Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T16:00:17Z",
            "detectionType": "offline",
            "siteId": "Tel Aviv",
            "policyId": "US policy",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Adult",
            "confidenceId": "Known",
            "actionName": "None",
            "description": "Violence"
        }
    },
    {
        "id": 47,
        "query": {
            "time": "2016-05-04T16:29:05Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T16:29:05Z",
            "detectionType": "offline",
            "siteId": "Chennai",
            "policyId": "Sales Offices",
            "listName": "Akamai Command and Control",
            "trigger": "domain",
            "categoryName": "Adult",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 48,
        "query": {
            "time": "2016-05-04T16:57:53Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T16:57:53Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "Corp policy",
            "listName": "Akamai Phishing",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Known",
            "actionName": "Deny",
            "description": "Violence"
        }
    },
    {
        "id": 49,
        "query": {
            "time": "2016-05-04T17:26:41Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T17:26:41Z",
            "detectionType": "offline",
            "siteId": "Cambridge",
            "policyId": "Remote Users",
            "listName": "DGA",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Known",
            "actionName": "Akamai Honeypot",
            "description": "Violence"
        }
    },
    {
        "id": 50,
        "query": {
            "time": "2016-05-04T17:55:29Z",
            "clientIp": "1.2.3.4",
            "dnsIp": "11.12.13.14",
            "domain": "no-block.net.",
            "queryType": "A"
        },
        "event": {
            "detectionTime": "2016-05-04T17:55:29Z",
            "detectionType": "offline",
            "siteId": "Corp",
            "policyId": "US policy",
            "listName": "DGA",
            "trigger": "domain",
            "categoryName": "Violence",
            "confidenceId": "Known",
            "actionName": "None",
            "description": "Violence"
        }
    }
]

Status 200 text/csv

Response Body:

# category: Social
query_time,client_ip,dns_ip,domain,resolved_ip,query_type,detection_time,detection_type,location_name,policy_name,trigger,category_name,confidence_id,action_name,description
2017-06-05T13:58:24.458,198.18.179.244,100.74.32.3,linkedin.com.,108.174.10.10,A,2017-06-05T13:58:24.458,online,Roaming,Unknown,domain,Social,Unknown,Block page,None
2017-06-05T07:42:28.103,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,N/A,AAAA,2017-06-05T07:42:28.103,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-05T07:42:28.033,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,"54.213.76.99,52.41.230.224,54.148.190.222,54.148.59.150,54.186.39.123,54.187.98.195,54.201.188.11,35.165.181.13",A,2017-06-05T07:42:28.033,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-05T07:42:28,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,"35.165.181.13,54.213.76.99,54.201.188.11,54.148.59.150,35.166.101.186,54.187.98.195,54.186.39.123,35.167.220.41",A,2017-06-05T07:42:28,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-04T21:57:57.355,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,172.217.12.110,172.217.12.110",A,2017-06-04T21:57:57.355,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-04T21:57:56.489,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:4002:0811:0000:0000:0000:200e",AAAA,2017-06-04T21:57:56.489,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-04T21:57:56.485,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,172.217.12.110,172.217.12.110",A,2017-06-04T21:57:56.485,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-04T21:57:56.454,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:4002:0811:0000:0000:0000:200e",AAAA,2017-06-04T21:57:56.454,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-04T21:57:56.351,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,172.217.12.110,172.217.12.110",A,2017-06-04T21:57:56.351,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-03T21:57:56.401,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,172.217.12.110,172.217.12.110",A,2017-06-03T21:57:56.401,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-03T21:57:55.466,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:4002:0811:0000:0000:0000:200e",AAAA,2017-06-03T21:57:55.466,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-03T21:57:55.462,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,172.217.12.110,172.217.12.110",A,2017-06-03T21:57:55.462,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-03T21:57:55.431,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:4002:0811:0000:0000:0000:200e",AAAA,2017-06-03T21:57:55.431,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-03T21:57:55.395,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,172.217.12.110,172.217.12.110",A,2017-06-03T21:57:55.395,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-03T07:42:28.179,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,N/A,AAAA,2017-06-03T07:42:28.179,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-03T07:42:28.059,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,"54.148.59.150,50.112.45.104,52.26.121.92,52.41.230.224,52.40.81.184,52.11.31.31,52.26.221.216,54.148.190.222",A,2017-06-03T07:42:28.059,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-02T07:42:28.474,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,N/A,AAAA,2017-06-02T07:42:28.474,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-02T07:42:28.254,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,"35.166.101.186,52.11.31.31,35.167.220.41,50.112.45.104,54.213.76.99,35.165.181.13,54.201.188.11,52.26.121.92",A,2017-06-02T07:42:28.254,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-02T01:03:35.386,198.18.179.85,100.74.32.3,google.com.,"173.194.209.101,173.194.209.100,173.194.209.138,173.194.209.139,173.194.209.102,173.194.209.113",A,2017-06-02T01:03:35.386,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T23:47:23.679,198.18.179.85,100.74.32.3,google.com.,"173.194.209.138,173.194.209.102,173.194.209.139,173.194.209.101,173.194.209.113,173.194.209.100",A,2017-06-01T23:47:23.679,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T23:47:02.921,198.18.179.159,100.74.32.3,google.com.,"108.177.11.100,108.177.11.139,108.177.11.102,108.177.11.113,108.177.11.101,108.177.11.138",A,2017-06-01T23:47:02.921,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T23:46:52.66,198.18.179.85,100.74.32.3,google.com.,"173.194.209.113,173.194.209.100,173.194.209.138,173.194.209.102,173.194.209.139,173.194.209.101",A,2017-06-01T23:46:52.66,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T23:46:23.636,198.18.179.85,100.74.32.3,google.com.,"173.194.209.101,173.194.209.113,173.194.209.100,173.194.209.138,173.194.209.102,173.194.209.139",A,2017-06-01T23:46:23.636,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T20:36:15.31,198.18.179.83,100.74.32.3,liberalkonservativt.se.,50.31.90.176,A,2017-06-01T20:36:15.31,online,Sarah Ubuntu location,Mac policy,domain,Social,Unknown,Block page,None
2017-06-01T20:35:32.108,198.18.179.83,100.74.32.3,redmik.pl.,193.70.43.236,A,2017-06-01T20:35:32.108,online,Sarah Ubuntu location,Mac policy,domain,Social,Unknown,Block page,None
2017-06-01T19:05:01.528,198.18.179.85,100.74.32.3,google.com.,"74.125.26.139,74.125.26.100,74.125.26.113,74.125.26.138,74.125.26.102,74.125.26.101",A,2017-06-01T19:05:01.528,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T19:04:31.502,198.18.179.85,100.74.32.3,google.com.,"74.125.26.101,74.125.26.139,74.125.26.100,74.125.26.113,74.125.26.138,74.125.26.102",A,2017-06-01T19:04:31.502,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T17:07:34.562,198.18.179.159,100.74.32.3,google.com.,"173.194.209.100,173.194.209.138,173.194.209.102,173.194.209.101,173.194.209.139,173.194.209.113",A,2017-06-01T17:07:34.562,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T13:03:20.758,198.18.179.85,100.74.32.3,www.google.com.,"74.125.31.99,74.125.31.106,74.125.31.104,74.125.31.147,74.125.31.105,74.125.31.103",A,2017-06-01T13:03:20.758,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T13:03:19.276,198.18.179.85,100.74.32.3,3.client-channel.google.com.,74.125.31.189,A,2017-06-01T13:03:19.276,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T07:42:33.53,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:400c:0c04:0000:0000:0000:0088",AAAA,2017-06-01T07:42:33.53,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T07:42:33.526,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.26.190,74.125.26.91,74.125.26.93,74.125.26.136",A,2017-06-01T07:42:33.526,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T07:42:33.5,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:400c:0c04:0000:0000:0000:0088",AAAA,2017-06-01T07:42:33.5,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T07:42:33.413,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.26.136,74.125.26.190,74.125.26.91,74.125.26.93",A,2017-06-01T07:42:33.413,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T07:42:33.413,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.26.136,74.125.26.190,74.125.26.91,74.125.26.93",A,2017-06-01T07:42:33.413,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-06-01T07:42:28.132,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,N/A,AAAA,2017-06-01T07:42:28.132,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-01T07:42:28.088,198.18.179.245,100.74.32.3,pipeline-edge-prod-24-1300278808.us-west-2.elb.amazonaws.com.,"54.187.98.195,50.112.45.104,35.167.220.41,35.166.101.186,54.186.39.123,35.165.181.13,54.213.76.99,54.201.188.11",A,2017-06-01T07:42:28.088,online,Responder site,Responder Policy,domain,Social,Unknown,Block page,None
2017-06-01T04:03:13.986,198.18.179.159,100.74.32.3,google.com.,"74.125.26.139,74.125.26.138,74.125.26.113,74.125.26.100,74.125.26.102,74.125.26.101",A,2017-06-01T04:03:13.986,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T21:01:01.67,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.139.190,74.125.139.91,74.125.139.93,74.125.139.136",A,2017-05-31T21:01:01.67,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T21:01:00.703,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.139.93,74.125.139.136,74.125.139.190,74.125.139.91",A,2017-05-31T21:01:00.703,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T21:01:00.703,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:400c:0c05:0000:0000:0000:0088",AAAA,2017-05-31T21:01:00.703,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T21:01:00.686,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:400c:0c05:0000:0000:0000:0088",AAAA,2017-05-31T21:01:00.686,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T21:01:00.662,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.139.93,74.125.139.136,74.125.139.190,74.125.139.91",A,2017-05-31T21:01:00.662,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T19:14:05.545,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.139.190,74.125.139.91,74.125.139.136,74.125.139.93",A,2017-05-31T19:14:05.545,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T19:14:05.537,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.139.93,74.125.139.190,74.125.139.91,74.125.139.136",A,2017-05-31T19:14:05.537,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T19:14:05.519,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,2607:f8b0:400c:0c05:0000:0000:0000:00be",AAAA,2017-05-31T19:14:05.519,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T19:14:05.482,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.139.190,74.125.139.91,74.125.139.136,74.125.139.93",A,2017-05-31T19:14:05.482,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None
2017-05-31T19:14:05.481,198.18.179.245,100.74.32.3,safebrowsing.google.com.,"sb.l.google.com.,74.125.139.190,74.125.139.91,74.125.139.136,74.125.139.93",A,2017-05-31T19:14:05.481,online,Responder site,Responder Policy,domain,Social,Confirmed,Block page,None

Report AUP Event Totals

Lists total counts for AUP events, aggregated for the given time period.

GET /etp-report/v1/configs/{configId}/aup-events/aggregate{?startTimeSec,dimension,endTimeSec,filters}

Sample: /etp-report/v1/configs/100/aup-events/aggregate?startTimeSec=1333631700&dimension=CATEGORY&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
dimension Enumeration CATEGORY Optionally filter by a dimension of data, either CATEGORY, DOMAIN, POLICY, or SITE.
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

[
    {
        "id": "-1",
        "name": "Gambling",
        "total": 321
    },
    {
        "id": "1",
        "name": "Firearms",
        "total": 201
    },
    {
        "id": "2",
        "name": "Violence",
        "total": 98
    },
    {
        "id": "3",
        "name": "Adult",
        "total": 12
    },
    {
        "id": "OTHERS",
        "total": 6
    }
]

Report AUP Event Time Series

Lists total counts for AUP events, aggregated by hour.

GET /etp-report/v1/configs/{configId}/aup-events/time-series{?startTimeSec,dimension,endTimeSec,filters}

Sample: /etp-report/v1/configs/100/aup-events/time-series?startTimeSec=1333631700&dimension=CATEGORY&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
dimension Enumeration CATEGORY Optionally filter by a dimension of data, either CATEGORY, DOMAIN, POLICY, or SITE.
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

{
    "columns": [
        {
            "id": "TIMESTAMP"
        },
        {
            "id": "aup-events"
        }
    ],
    "rows": [
        [
            "2016-05-03T18:24:17Z",
            8
        ],
        [
            "2016-05-03T18:53:05Z",
            946
        ],
        [
            "2016-05-03T19:21:53Z",
            888
        ],
        [
            "2016-05-03T19:50:41Z",
            398
        ],
        [
            "2016-05-03T20:19:29Z",
            79
        ],
        [
            "2016-05-03T20:48:17Z",
            25
        ],
        [
            "2016-05-03T21:17:05Z",
            300
        ],
        [
            "2016-05-03T21:45:53Z",
            395
        ],
        [
            "2016-05-03T22:14:41Z",
            715
        ],
        [
            "2016-05-03T22:43:29Z",
            671
        ]
    ]
}

Report DNS Activity Aggregate

Lists the count of DNS activities aggregated for the given time period.

GET /etp-report/v1/configs/{configId}/dns-activities/aggregate{?startTimeSec,dimension,endTimeSec,filters}

Sample: /etp-report/v1/configs/100/dns-activities/aggregate?startTimeSec=1333631700&dimension=Country&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
dimension Enumeration Country Optionally filter by a dimension of data, either ASN, DOMAIN, COUNTRY, or SITE.
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

[
    {
        "id": "US",
        "total": 123442
    },
    {
        "id": "JP",
        "total": 92342
    },
    {
        "id": "IN",
        "total": 23434
    },
    {
        "id": "UK",
        "total": 234445
    },
    {
        "id": "OTHERS",
        "total": 23423431
    }
]

Report DNS Activity Time Series

Lists the count of DNS activities, aggregated by hour.

GET /etp-report/v1/configs/{configId}/dns-activities/time-series{?startTimeSec,dimension,endTimeSec,filters}

Sample: /etp-report/v1/configs/100/dns-activities/time-series?startTimeSec=1333631700&dimension=Country&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
dimension Enumeration Country Optionally filter by a dimension of data, , either ASN, DOMAIN, COUNTRY, or SITE.
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

{
    "columns": [
        {
            "id": "TIMESTAMP"
        },
        {
            "id": "US"
        },
        {
            "id": "JP"
        },
        {
            "id": "IN"
        },
        {
            "id": "OTHERS"
        }
    ],
    "rows": [
        [
            "2016-05-03T18:24:17Z",
            8,
            231,
            235,
            588
        ],
        [
            "2016-05-03T18:53:05Z",
            946,
            134,
            62,
            86
        ],
        [
            "2016-05-03T19:21:53Z",
            888,
            985,
            36,
            851
        ],
        [
            "2016-05-03T19:50:41Z",
            398,
            847,
            934,
            131
        ],
        [
            "2016-05-03T20:19:29Z",
            794,
            691,
            18,
            444
        ],
        [
            "2016-05-03T20:48:17Z",
            25,
            109,
            428,
            359
        ],
        [
            "2016-05-03T21:17:05Z",
            300,
            202,
            266,
            473
        ],
        [
            "2016-05-03T21:45:53Z",
            395,
            501,
            955,
            783
        ],
        [
            "2016-05-03T22:14:41Z",
            715,
            7,
            619,
            227
        ],
        [
            "2016-05-03T22:43:29Z",
            671,
            490,
            525,
            140
        ]
    ]
}

Report Security Connector Event Details

Retrieves the Security Connector events for the an ETP configuration for a given time period.

GET /etp-report/v2/configs/{configId}/sinkhole-events/details{?startTimeSec,endTimeSec,filters}

Sample: /etp-report/v2/configs/100/sinkhole-events/details?startTimeSec=1333631700&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

[
    {
        "sinkholeId": "1234-someId",
        "eventId": "1234-5678-abcd",
        "sourcePort": 16362,
        "destinationPort": 80,
        "l4Protocol": "TCP",
        "machineNames": [
            "blr-mpz72",
            "blr-mpa-71"
        ],
        "hostname": "www.somedomain.com",
        "userAgent": "CITRIXRECEIVER",
        "l7Protocol": "HTTP",
        "eventTime": "2018-03-23T09:13:10Z",
        "url": "/index.html",
        "sinkholeName": "1234_some_sinkhole_name",
        "hitCount": 1,
        "configId": 100,
        "internalIP": "1.2.3.4",
        "sinkholeIP": "1.2.3.5"
    },
    {
        "sinkholeId": "1234-someId",
        "eventId": "1234-5678#abcd",
        "sourcePort": 16361,
        "destinationPort": 80,
        "l4Protocol": "TCP",
        "machineNames": [
            "blr-mpz72",
            "blr-mpa-71"
        ],
        "hostname": "www.somedomain.com",
        "userAgent": "CITRIXRECEIVER",
        "l7Protocol": "HTTP",
        "eventTime": "2018-03-23T09:14:10Z",
        "url": "/index.html",
        "sinkholeName": "1234_some_sinkhole_name",
        "hitCount": 1,
        "configId": 100,
        "internalIP": "1.2.3.4",
        "sinkholeIP": "1.2.3.5"
    },
    {
        "sinkholeId": "1234-someId",
        "eventId": "1234#5678-abcd",
        "sourcePort": 54484,
        "destinationPort": 80,
        "l4Protocol": "TCP",
        "machineNames": [
            "blr-mpz72",
            "blr-mpa-71"
        ],
        "hostname": "www.somedomain.com",
        "userAgent": "CITRIXRECEIVER",
        "l7Protocol": "HTTP",
        "eventTime": "2018-03-23T09:15:10Z",
        "url": "/index.html",
        "sinkholeName": "1234_some_sinkhole_name",
        "hitCount": 1,
        "configId": 100,
        "internalIP": "1.2.3.4",
        "sinkholeIP": "1.2.3.5"
    }
]

Status 200 text/csv

Response Body:

# Time Zone: UTC +05:30
EventTime,SecurityConnectorName,EventId,AffectedInternalIP,SourcePort,DestinationPort,Layer4Protocol,Hostname,UserAgent,Layer7Protocol,URL,HitCount,Domain,MachineNames
2018-03-22T09:53:58,cdfc6fd6-f781-4c27-8a70-a7f0942570a7,1521692638000#cdfc6fd6-f781-4c27-8a70-a7f0942570a7#21397,172.27.2.37,58804,500,TCP,N/A,N/A,,N/A,1,,
2018-03-22T09:53:44,cdfc6fd6-f781-4c27-8a70-a7f0942570a7,1521692624000#cdfc6fd6-f781-4c27-8a70-a7f0942570a7#41875,172.27.2.37,58417,22,TCP,N/A,N/A,,N/A,1,,
2018-03-21T09:59:09,cdfc6fd6-f781-4c27-8a70-a7f0942570a7,1521606549000#cdfc6fd6-f781-4c27-8a70-a7f0942570a7#871,172.27.2.37,59545,500,TCP,N/A,N/A,,N/A,1,,
2018-03-21T09:58:55,cdfc6fd6-f781-4c27-8a70-a7f0942570a7,1521606535000#cdfc6fd6-f781-4c27-8a70-a7f0942570a7#25537,172.27.2.37,59157,22,TCP,N/A,N/A,,N/A,1,,
2018-03-20T10:01:06,cdfc6fd6-f781-4c27-8a70-a7f0942570a7,1521520266000#cdfc6fd6-f781-4c27-8a70-a7f0942570a7#1718,172.27.2.37,55209,500,TCP,N/A,N/A,,N/A,1,,
2018-03-20T10:00:52,cdfc6fd6-f781-4c27-8a70-a7f0942570a7,1521520252000#cdfc6fd6-f781-4c27-8a70-a7f0942570a7#14004,172.27.2.37,54824,22,TCP,N/A,N/A,,N/A,1,

Report Security Connector Event Totals

Lists the count of Security Connector events, grouped for a given granularity.

GET /etp-report/v2/configs/{configId}/sinkhole-events/aggregate{?startTimeSec,dimension,endTimeSec,filters}

Sample: /etp-report/v2/configs/100/sinkhole-events/aggregate?startTimeSec=1333631700&dimension=internalIP&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
dimension Enumeration internalIP Optionally filter by a dimension of data, either INTERNALIP, SOURCEPORT, DESTINATIONPORT, SINKHOLEID, SINKHOLEIP, HOSTNAME, MACHINENAME, UUID, DESTINATIONIP, SITE, LIST, POLICY, ACTION, CATEGORY, ISALERT, CONFIDENCE, or DOMAIN.
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

{
    "aggregations": [
        {
            "id": "172.27.2.37",
            "name": "172.27.2.37",
            "total": 14
        }
    ],
    "dimension": {
        "id": "sourceIP",
        "name": "internalIP",
        "total": 1
    }
}

Report Security Connector Event Time Series

Retrieves a list of Security Connector event totals, aggregated by hour.

GET /etp-report/v2/configs/{configId}/sinkhole-events/time-series{?startTimeSec,dimension,endTimeSec,filters}

Sample: /etp-report/v2/configs/100/sinkhole-events/time-series?startTimeSec=1333631700&dimension=internalIP&endTimeSec=1333631700&filters=%7B%22action%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22isAlert%22%3A%7B%22in%22%3A%5B%22true%22%5D%7D%2C%22asn%22%3A%7B%22in%22%3A%5B%2224940%22%5D%7D%2C%22site%22%3A%7B%22in%22%3A%5B%22-1%22%5D%7D%2C%22list%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22policy%22%3A%7B%22in%22%3A%5B%22164%22%5D%7D%2C%22category%22%3A%7B%22in%22%3A%5B%221%22%5D%7D%2C%22domain%22%3A%7B%22in%22%3A%5B%22njit.edu.%22%5D%7D%2C%22destinationIp%22%3A%7B%22in%22%3A%5B%221.2.1.43%22%5D%7D%2C%22country%22%3A%7B%22in%22%3A%5B%22US%22%5D%7D%7D

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
dimension Enumeration internalIP Optionally filter by a dimension of data, either INTERNALIP, SOURCEPORT, DESTINATIONPORT, SINKHOLEID, SINKHOLEIP, HOSTNAME, MACHINENAME, UUID, DESTINATIONIP, SITE, LIST, POLICY, ACTION, CATEGORY, ISALERT, CONFIDENCE, or DOMAIN.
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
filters String {"action":{"in":["1"]},"isAlert":{"in":["true"]},"asn":{"in":["24940"]},"site":{"in":["-1"]},"list":{"in":["1"]},"policy":{"in":["164"]},"category":{"in":["1"]},"domain":{"in":["njit.edu."]},"destinationIp":{"in":["1.2.1.43"]},"country":{"in":["US"]}} Filters report data using the Filter JSON object. You supply this object as the value after you define the filter parameters.

Status 200 application/json

Response Body:

{
    "columns": [
        {
            "id": "TIMESTAMP",
            "name": "TIMESTAMP"
        },
        {
            "id": "198.18.179.37",
            "name": "198.18.179.37"
        },
        {
            "id": "172.27.2.37",
            "name": "172.27.2.37"
        },
        {
            "id": "198.18.179.237",
            "name": "198.18.179.237"
        },
        {
            "id": "172.28.117.126",
            "name": "172.28.117.126"
        },
        {
            "id": "OTHERS",
            "name": "OTHERS"
        }
    ],
    "rows": [
        [
            "2018-02-28T18:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-02-28T20:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-02-28T22:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T00:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T02:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T04:00:00Z",
            0,
            2,
            0,
            0,
            0
        ],
        [
            "2018-03-01T06:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T08:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T10:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T12:00:00Z",
            0,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T14:00:00Z",
            104,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T16:00:00Z",
            300,
            0,
            0,
            2,
            0
        ],
        [
            "2018-03-01T18:00:00Z",
            5398,
            0,
            0,
            0,
            0
        ],
        [
            "2018-03-01T20:00:00Z",
            0,
            0,
            0,
            0,
            0
        ]
    ]
}

Report IOC Domain Tree

Retrieves a list of blacklisted domains matching a given record. Returns an empty list if the record is unlisted.

GET /etp-report/v1/ioc/domain-tree{?record,recordType}

Sample: /etp-report/v1/ioc/domain-tree?record=05xy.abc.com&recordType=DOMAIN

Parameter Type Sample Description
Required Query Parameters
record String 05xy.abc.com The target record from which to retrieve blacklisted domains.
Optional Query Parameters
recordType Enumeration DOMAIN Specifies the record type, either DOMAIN or IP.

Status 200 application/json

Response Body:

[
    "00005ik.rcomhost.com."
]

Report IOC Information

Retrieves the latest snapshot information for a given Domain or IP.

GET /etp-report/v1/ioc/information{?record,recordType}

Sample: /etp-report/v1/ioc/information?record=05xy.abc.com&recordType=DOMAIN

Parameter Type Sample Description
Required Query Parameters
record String 05xy.abc.com The target record from which to retrieve blacklisted domains.
Optional Query Parameters
recordType Enumeration DOMAIN Specifies the record type, either DOMAIN or IP.

Status 200 application/json

Response Body:

{
    "record": "00005ik.rcomhost.com.",
    "recordType": "DOMAIN",
    "description": "Locky Ransomware distribution site",
    "registrarName": "NETWORK SOLUTIONS, LLC.",
    "registrantName": "LLC, networksolutions",
    "registrantOrganization": "Network Solutions LLC",
    "registrantCity": "HERNDON",
    "registrantState": "VA",
    "registrantEmails": [
        "Domains@web.com"
    ],
    "nameServerNames": [
        "NS45.WORLDNIC.COM",
        "NS46.WORLDNIC.COM"
    ],
    "registrantAddress": "HERNDON",
    "registrantCountry": "UNITED STATES",
    "whoisServer": "whois.networksolutions.com",
    "createdDate": "2012-01-25T00:00:00Z",
    "lastModifiedDate": "2014-02-26T00:00:00Z"
}

Report IOC Changes

Retrieves a list of historical change information for a given record and record type. If you omit startTimeSec and endTimeSec from the request URL, the operation provides all available historical information.

GET /etp-report/v1/ioc/changes{?startTimeSec,record,endTimeSec,recordType}

Sample: /etp-report/v1/ioc/changes?startTimeSec=1333631700&record=05xy.abc.com&endTimeSec=1333631700&recordType=DOMAIN

Parameter Type Sample Description
Required Query Parameters
record String 05xy.abc.com The target record from which to retrieve blacklisted domains.
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
recordType Enumeration DOMAIN Specifies the record type, either DOMAIN or IP.

Status 200 application/json

Response Body:

[
    {
        "recordType": "DOMAIN",
        "date": "2017-03-07T00:00:00Z",
        "state": "ADDED",
        "description": "First tracked"
    },
    {
        "recordType": "DOMAIN",
        "date": "2017-03-07T00:00:00Z",
        "state": "CHANGED",
        "description": "Severity upgraded from Unknown to Suspected Malware",
        "key": "CONFIDENCE",
        "oldValue": "Unknown",
        "newValue": "Suspected",
        "listId": "1",
        "listName": "Malware"
    }
]

Report IOC Configuration Time Series

Retrieves the DNS activities of a configuration for a given domain or IP, aggregated by day. If you omit startTimeSec and endTimeSec from the request URL, the operation provides all available historical information.

GET /etp-report/v1/configs/{configId}/ioc/time-series{?startTimeSec,record,endTimeSec,recordType}

Sample: /etp-report/v1/configs/100/ioc/time-series?startTimeSec=1333631700&record=05xy.abc.com&endTimeSec=1333631700&recordType=DOMAIN

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
Required Query Parameters
record String 05xy.abc.com The target record from which to retrieve blacklisted domains.
startTimeSec Integer 1333631700 The start time for report data, in epoch seconds.
Optional Query Parameters
endTimeSec Integer 1333631700 The end time for report data, in epoch seconds.
recordType Enumeration DOMAIN Specifies the record type, either DOMAIN or IP.

Status 200 application/json

Response Body:

{
    "columns": [
        {
            "id": "TIMESTAMP",
            "name": "TIMESTAMP"
        },
        {
            "id": "TOTAL",
            "name": "TOTAL"
        }
    ],
    "rows": [
        [
            "2017-02-23T00:00:00Z",
            0
        ],
        [
            "2017-02-24T00:00:00Z",
            0
        ],
        [
            "2017-02-25T00:00:00Z",
            0
        ],
        [
            "2017-02-26T00:00:00Z",
            0
        ],
        [
            "2017-02-27T00:00:00Z",
            0
        ],
        [
            "2017-02-28T00:00:00Z",
            0
        ],
        [
            "2017-03-01T00:00:00Z",
            0
        ],
        [
            "2017-03-02T00:00:00Z",
            0
        ],
        [
            "2017-03-03T00:00:00Z",
            0
        ],
        [
            "2017-03-04T00:00:00Z",
            0
        ],
        [
            "2017-03-05T00:00:00Z",
            0
        ],
        [
            "2017-03-06T00:00:00Z",
            0
        ],
        [
            "2017-03-07T00:00:00Z",
            0
        ],
        [
            "2017-03-08T00:00:00Z",
            0
        ],
        [
            "2017-03-09T00:00:00Z",
            0
        ],
        [
            "2017-03-10T00:00:00Z",
            0
        ],
        [
            "2017-03-11T00:00:00Z",
            0
        ],
        [
            "2017-03-12T00:00:00Z",
            0
        ],
        [
            "2017-03-13T00:00:00Z",
            0
        ],
        [
            "2017-03-14T00:00:00Z",
            0
        ],
        [
            "2017-03-15T00:00:00Z",
            0
        ],
        [
            "2017-03-16T00:00:00Z",
            2
        ],
        [
            "2017-03-17T00:00:00Z",
            0
        ],
        [
            "2017-03-18T00:00:00Z",
            0
        ],
        [
            "2017-03-19T00:00:00Z",
            0
        ],
        [
            "2017-03-20T00:00:00Z",
            0
        ],
        [
            "2017-03-21T00:00:00Z",
            0
        ],
        [
            "2017-03-22T00:00:00Z",
            0
        ],
        [
            "2017-03-23T00:00:00Z",
            0
        ]
    ]
}

List Report Schedules

Retrieves all configured report schedules for a given ETP configuration.

GET /etp-report/v1/configs/{configId}/schedules

Sample: /etp-report/v1/configs/100/schedules

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.

Status 200 application/json

Response Body:

[
    {
        "scheduleId": 100,
        "recurrence": "WEEKLY",
        "dayOfWeek": "MONDAY",
        "userTimeZone": "+05:30",
        "filters": {
            "isAlert": {
                "in": [
                    "true"
                ]
            }
        },
        "status": "ENABLED",
        "reportTemplate": "THREAT_EVENTS_BY_LOCATION_AND_DOMAIN",
        "emails": [
            "user1@akamai.com",
            "user2@akamai.com"
        ],
        "createdBy": "user1",
        "creationDate": "2017-06-22T11:12:55Z",
        "modifiedBy": "user2",
        "modifiedDate": "2017-06-28T11:12:55Z"
    },
    {
        "scheduleId": 110,
        "recurrence": "DAILY",
        "dayOfWeek": null,
        "userTimeZone": "+05:30",
        "status": "ENABLED",
        "reportTemplate": "THREAT_EVENTS_BY_LOCATION_AND_DOMAIN",
        "emails": [
            "user1@akamai.com"
        ],
        "createdBy": "user1",
        "creationDate": "2017-06-23T11:12:55Z",
        "modifiedBy": "user1",
        "modifiedDate": "2017-06-23T11:12:55Z"
    }
]

Create a Report Schedule

Creates a new report schedule for a given ETP configuration.

POST /etp-report/v1/configs/{configId}/schedules

Sample: /etp-report/v1/configs/100/schedules

Content-Type: application/json

Request Body:

{
    "recurrence": "WEEKLY",
    "dayOfWeek": "MONDAY",
    "userTimeZone": "+05:30",
    "filters": {
        "isAlert": {
            "in": [
                "true"
            ]
        }
    },
    "emails": [
        "user1@akamai.com",
        "user2@akamai.com"
    ],
    "reportTemplate": "THREAT_EVENTS_BY_LOCATION_AND_DOMAIN"
}
Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.

Status 201

Headers:

Location: /etp-report/v1/configs/100/schedules/1027

Get a Report Schedule

Retrieves the configuration of a specified report schedule.

GET /etp-report/v1/configs/{configId}/schedules/{scheduleId}

Sample: /etp-report/v1/configs/100/schedules/1000

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
scheduleId Integer 1000 A unique identifier for each report schedule configuration.

Status 200 application/json

Response Body:

{
    "scheduleId": 100,
    "recurrence": "WEEKLY",
    "dayOfWeek": "MONDAY",
    "userTimeZone": "+05:30",
    "filters": {
        "isAlert": {
            "in": [
                "true"
            ]
        }
    },
    "status": "ENABLED",
    "reportTemplate": "THREAT_EVENTS_BY_LOCATION_AND_DOMAIN",
    "emails": [
        "user1@akamai.com",
        "user2@akamai.com"
    ],
    "createdBy": "user1",
    "creationDate": "2017-06-22T11:12:55Z",
    "modifiedBy": "user2",
    "modifiedDate": "2017-06-28T11:12:55Z"
}

Update a Report Schedule

Updates the configuration of a specified report schedule.

PUT /etp-report/v1/configs/{configId}/schedules/{scheduleId}

Sample: /etp-report/v1/configs/100/schedules/1000

Content-Type: application/json

Request Body:

{
    "recurrence": "DAILY",
    "userTimeZone": "+05:30",
    "emails": [
        "user2@akamai.com",
        "user3@akamai.com"
    ],
    "reportTemplate": "THREAT_EVENTS_BY_LOCATION_AND_DOMAIN"
}
Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
scheduleId Integer 1000 A unique identifier for each report schedule configuration.

Status 200

Remove a Report Schedule

Removes the configuration of a specified report schedule.

DELETE /etp-report/v1/configs/{configId}/schedules/{scheduleId}

Sample: /etp-report/v1/configs/100/schedules/1000

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
scheduleId Integer 1000 A unique identifier for each report schedule configuration.

Status 200

Enable a Report Schedule

Enables the configuration of a specified report schedule.

POST /etp-report/v1/configs/{configId}/schedules/{scheduleId}/enable

Sample: /etp-report/v1/configs/100/schedules/1000/enable

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
scheduleId Integer 1000 A unique identifier for each report schedule configuration.

Status 200

Disable a Report Schedule

Disables the configuration of a specified report schedule.

POST /etp-report/v1/configs/{configId}/schedules/{scheduleId}/disable

Sample: /etp-report/v1/configs/100/schedules/1000/disable

Parameter Type Sample Description
URL Parameters
configId Integer 100 A unique identifier for each configuration.
scheduleId Integer 1000 A unique identifier for each report schedule configuration.

Status 200


Last modified: 4/18/2018