---
title: "get black or white rule attack logs"
method: GET
path: "/open/records/rule"
tags: ["log/rule"]
---

# get black or white rule attack logs

`GET /open/records/rule`

## Query parameters

- `action` string
- `attack_type` string
- `end` integer
- `event_id` string
- `host` string
- `ip` string
- `ja4_fingerprint` string
- `page` integer
- `page_size` integer
- `port` string
- `start` integer
- `url` string

## Response `200`

OK

- object
  - `data` RecordGetRuleDetectLogListRes
    - `data` ModelRuleDetectLog[]
      - `action` integer — 0: 放行, 1: 阻断
      - `attack_type` integer
      - `city` string
      - `country` string
      - `created_at` string
      - `decode_path` string
      - `dst_ip` string
      - `dst_port` integer
      - `eventId` string
      - `event_id` string — to eliminate ambiguous
      - `host` string
      - `id` integer
      - `ja4_fingerprint` string
      - `lat` string
      - `lng` string
      - `location` string
      - `method` string
      - `module` string
      - `payload` string
      - `policy_name` string
      - `protocol` integer
      - `province` string
      - `query_string` string
      - `reason` string
      - `req_body` string
      - `req_header` string
      - `risk_level` integer
      - `rsp_body` string
      - `rsp_header` string
      - `rule_id` string
      - `rule_id_list` string[]
      - `short_rule_id` string
      - `site_uuid` string
      - `socket_ip` string
      - `src_ip` string
      - `src_port` integer
      - `status_code` integer
      - `timestamp` integer
      - `updated_at` string
      - `url_path` string
      - `website` string
    - `total` integer
  - `err` string
  - `msg` string

---

[API](https://skmtc.net/chaitin/apis/mgt-api.md) · [All operations](https://skmtc.net/chaitin/apis/mgt-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/chaitin/mgt-api/versions/8ff8cf839cf1/schema)