Skip to content

node_ebpf_program

Node eBPF mitigation programs

Index

Path
GET /v7.0/node_ebpf_programs
Description
Authentication required
yes
Scope
node_ebpf_program#index
Aliases
list
Blocking
no

Input parameters

Layout
object
Namespace
node_ebpf_program
ParameterTypeRequiredDetails
from_id
From ID
 Integer no

List objects with IDs greater or lower than this value

Default: null

Validation rules
RuleDetails
Number
  • Must be a number after parameter type conversion.
  • Minimum: 0 (inclusive).

Validation error message: must be at least 0
limit
Limit
 Integer no

Number of objects to retrieve

Default: 1000

Validation rules
RuleDetails
Number
  • Must be a number after parameter type conversion.
  • Minimum: 0 (inclusive).
  • Maximum: 1000 (inclusive).

Validation error message: must be between 0 and 1000
node
Node
 Resource no
node_active
Node_active
 Boolean no

Default: null
source
Source
 String no

Default: null

Validation rules
RuleDetails
Include

Allowed values:

  • current
  • event

Validation error message: %{value} cannot be used
node_kernel_evidence
NodeKernelEvidence
 Resource no
from
From
 Datetime no

Default: null
to
To
 Datetime no

Default: null
name
Name
 String no

Default: null
active
Active
 Boolean no

Default: null

Validation rules
RuleDetails
Include

Allowed values:

  • true
  • false

Validation error message: %{value} cannot be used

Output parameters

Layout
object_list
Namespace
node_ebpf_programs
ParameterTypeDescription
id
Id
 Integer
node
Node
 Resource
source
Source
 String
node_kernel_evidence
NodeKernelEvidence
 Resource
source_revision
Source_revision
 String
observed_at
Observed_at
 Datetime
name
Name
 String
description
Description
 String
since_kernel
Since_kernel
 String
until_kernel
Until_kernel
 String
revision
Revision
 String
digest
Digest
 String
active
Active
 Boolean
attached_at
Attached_at
 Datetime
verified_at
Verified_at
 Datetime

Show

Path
GET /v7.0/node_ebpf_programs/{node_ebpf_program_id}
Description
Authentication required
yes
Scope
node_ebpf_program#show
Aliases
find
Blocking
no

Input parameters

No parameters.

Output parameters

Layout
object
Namespace
node_ebpf_program
ParameterTypeDescription
id
Id
 Integer
node
Node
 Resource
source
Source
 String
node_kernel_evidence
NodeKernelEvidence
 Resource
source_revision
Source_revision
 String
observed_at
Observed_at
 Datetime
name
Name
 String
description
Description
 String
since_kernel
Since_kernel
 String
until_kernel
Until_kernel
 String
revision
Revision
 String
digest
Digest
 String
active
Active
 Boolean
attached_at
Attached_at
 Datetime
verified_at
Verified_at
 Datetime