Skip to content

node_ebpf_program_object

Kernel-visible BPF object names used by Node eBPF mitigations

Index

Path
GET /v7.0/node_ebpf_program_objects
Description
Authentication required
yes
Scope
node_ebpf_program_object#index
Aliases
list
Blocking
no

Input parameters

Layout
object
Namespace
node_ebpf_program_object
ParameterTypeRequiredDetails
from_id
From ID
 Integer no

List objects with IDs greater or lower than this value

Default: null

Validation rules
RuleDetails
Number
  • Must be a number after parameter type conversion.
  • Minimum: 0 (inclusive).

Validation error message: must be at least 0
limit
Limit
 Integer no

Number of objects to retrieve

Default: 1000

Validation rules
RuleDetails
Number
  • Must be a number after parameter type conversion.
  • Minimum: 0 (inclusive).
  • Maximum: 1000 (inclusive).

Validation error message: must be between 0 and 1000
node
Node
 Resource no
node_active
Node_active
 Boolean no

Default: null
source
Source
 String no

Default: null

Validation rules
RuleDetails
Include

Allowed values:

  • current
  • event

Validation error message: %{value} cannot be used
node_kernel_evidence
NodeKernelEvidence
 Resource no
from
From
 Datetime no

Default: null
to
To
 Datetime no

Default: null
node_ebpf_program
NodeEbpfProgram
 Resource no
name
Name
 String no

Default: null

Output parameters

Layout
object_list
Namespace
node_ebpf_program_objects
ParameterTypeDescription
id
Id
 Integer
node
Node
 Resource
source
Source
 String
node_kernel_evidence
NodeKernelEvidence
 Resource
source_revision
Source_revision
 String
observed_at
Observed_at
 Datetime
node_ebpf_program
NodeEbpfProgram
 Resource
name
Name
 String