v32

latestOpenAPI 3.1.0raw.githubusercontent.com2026-05-151,1412,2144.5 MB

Analytics

Get Request Details

Retrieves all the available information for a request that matches a given request id

get/waap/v1/domains/{domain_id}/requests/{request_id}/details

Path parameters

domain_idinteger required

The domain ID

request_idstring required

The request ID

Response

Successful Response

idstring required

Request ID

pathstring required

Request path

methodstring required

Request method

actionstring required

Request action

rule_idstring required

ID of the triggered rule

rule_namestring required

Name of the triggered rule

request_timestring date-time required

The time of the request

reference_idstring required

Reference ID to identify user sanction

session_idstring required

The session ID associated with the request.

content_typestring required

Content type of request

schemestring required

The URI scheme of the request that generated an event

http_status_codeinteger required

Status code for http request

http_versionstring required

HTTP version of request

response_timestring required

Time took to process all request

request_headersobject required

HTTP request headers

incident_idstring required

ID of challenge that was generated

request_typestring required

The type of the request that generated an event

session_request_countstring required

The number requests in session

domainstring required

Domain name

requested_domainstring required

The real domain name

query_stringstring required

The query string of the request

result'passed' | 'blocked' | 'suppressed' | '' required

The result of a request

decision'passed' | 'allowed' | 'monitored' | 'blocked' | ''

The decision made for processing the request through the WAAP.

optional_action'captcha' | 'challenge' | ''

An optional action that may be applied in addition to the primary decision.

traffic_typesstring[] required

List of traffic types

ja3string

JA3 TLS client fingerprint as a 32-character lowercase hexadecimal MD5 hash, or an empty string when the record has no JA3 value.

Example response

{
  "id": "96763b8fb655e9f18a2e04097b704e39-458959",
  "path": "/new_index",
  "method": "GET",
  "action": "block",
  "rule_id": "86",
  "rule_name": "SQL Injection",
  "user_agent": {
    "full_string": "Mozilla/5.0 (X11; U; Linux x86_64; en-US) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/30.1.1599.114 Safari/537.36 Puffin/4.5.0IT",
    "client": "Firefox",
    "client_version": "44.3",
    "base_browser": "Chrome",
    "base_browser_version": "47.0.2526.83",
    "os": "Android",
    "device": "Amazon Kindle Fire HDX 7",
    "device_type": "mobile",
    "cpu": "intel",
    "rendering_engine": "AppleWebKit",
    "client_type": "Custom Browser"
  },
  "network": {
    "client_ip": "116.83.107.125",
    "country": "IL",
    "organization": {
      "name": "InfoWeb(Fujitsu Ltd",
      "subnet": "116.83.0.0-116.83.127.255"
    }
  },
  "request_time": "2025-08-28T07:13:59Z",
  "reference_id": "ad07c06f19054e484974fa22e9fb6bb1",
  "session_id": "0c74d14951b22dc3f22cbba9668ecea1",
  "content_type": "text/html; charset=UTF-8",
  "scheme": "https",
  "http_status_code": 200,
  "http_version": "1.1",
  "response_time": "3",
  "request_headers": {
    "ACCEPT": "*/*",
    "ACCEPT-ENCODING": "gzip, deflate",
    "CONNECTION": "keep-alive",
    "HOST": "oih.jung.fblcloud-qa.net",
    "USER-AGENT": "Firefox/44.3",
    "X-FORWARDED-FOR": "169.54.212.219",
    "X-FORWARDED-PORT": "80",
    "X-FORWARDED-PROTO": "http"
  },
  "incident_id": "9f06152824394345",
  "request_type": "block",
  "session_request_count": "1",
  "domain": "example.com",
  "requested_domain": "example.com",
  "query_string": "q=select%20user%20from%20master..a",
  "result": "passed",
  "decision": "blocked",
  "optional_action": "captcha",
  "traffic_types": [
    "sanctioned",
    "policy_blocked"
  ],
  "pattern_matched_tags": [
    {
      "tag": "sql",
      "display_name": "SQL Injection",
      "description": "This client attempted insertion or “injection” of a SQL query via the input data from the client to the application. A successful SQL injection exploit can read sensitive data from the database, modify database data, etc.",
      "field": "uri",
      "field_name": "q",
      "pattern_name": "SQL Injection Prevention",
      "pattern_value": "select user from master..",
      "execution_phase": "access"
    }
  ],
  "common_tags": [
    {
      "tag": "injectionattack",
      "display_name": "Injection Attack",
      "description": "Multiple injection attempts were detected."
    }
  ],
  "ja3": "e7d705a3286e19ea42f587b344ee6865"
}