{"command":{"effect":"read","timeoutSeconds":30,"inputSchema":{"type":"object","description":"Retrieves the top layer 3 attacks from origin to target location. Values are a percentage out of the total layer 3 attacks (with billing country). You can optionally limit the number of attacks by origin/target location (useful if all the top attacks are from or to the same location).","properties":{"query":{"type":"object","properties":{"limit":{"description":"Limits the number of objects returned in the response.","type":"integer","default":5,"exclusiveMinimum":0,"examples":[5]},"name":{"description":"Array of names used to label the series in the response.","type":"array","items":{"type":"string","examples":["main_series"]}},"dateRange":{"description":"Filters results by relative date range ending at the current time, with each value producing a separate series. Use `<n>d` for days (up to `364d`) or `<n>w` for weeks (up to `52w`). Append `control` to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. `7dcontrol` covers days -14 to -7, `10dcontrol` covers days -24 to -14). For example, pass `7d` and `7dcontrol` to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including `control`) satisfy this automatically. Use this parameter or set specific start and end dates (`dateStart` and `dateEnd` parameters).","type":"array","items":{"pattern":"^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$","type":"string","examples":["7d"]},"examples":["7d"]},"dateStart":{"description":"Start of the date range. Alternative to `dateRange`; provide together with `dateEnd`. When requesting comparison series, every series must resolve to the same duration as the main series. Each `dateStart`/`dateEnd` is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.","type":"array","items":{"format":"date-time","type":"string"},"examples":["2023-09-01T11:41:33.782Z"]},"dateEnd":{"description":"End of the date range (inclusive). Alternative to `dateRange`; provide together with `dateStart`. When requesting comparison series, every series must resolve to the same duration as the main series. Each `dateStart`/`dateEnd` is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.","type":"array","items":{"format":"date-time","type":"string"},"examples":["2023-09-01T11:41:33.782Z"]},"location":{"description":"Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with `-` to exclude locations from results. For example, `-US,PT` excludes results from the US, but includes results from PT.","type":"array","items":{"type":"string"},"examples":["US,CA"]},"continent":{"description":"Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with `-` to exclude continents from results. For example, `-EU,NA` excludes results from EU, but includes results from NA.","type":"array","items":{"type":"string"},"examples":["EU,NA"]},"ipVersion":{"description":"Filters results by IP version (Ipv4 vs. IPv6).","type":"array","items":{"enum":["IPv4","IPv6"],"type":"string"},"examples":["IPv4"]},"protocol":{"description":"Filters the results by layer 3/4 protocol.","type":"array","items":{"enum":["UDP","TCP","ICMP","GRE"],"type":"string"}},"limitDirection":{"description":"Specifies whether the `limitPerLocation` applies to the source or target location.","type":"string","default":"ORIGIN","enum":["ORIGIN","TARGET"],"examples":["ORIGIN"]},"limitPerLocation":{"description":"Limits the number of attacks per origin/target (refer to `limitDirection` parameter) location.","type":"integer","default":10,"exclusiveMinimum":0,"examples":[10]},"magnitude":{"description":"Orders results based on attack magnitude, defined by total mitigated bytes or total mitigated attacks.","type":"string","enum":["MITIGATED_BYTES","MITIGATED_ATTACKS"],"examples":["MITIGATED_BYTES"]},"normalization":{"description":"Normalization method applied to the results. Refer to [Normalization methods](https://developers.cloudflare.com/radar/concepts/normalization/).","type":"string","default":"PERCENTAGE","enum":["PERCENTAGE","MIN_MAX"],"examples":["PERCENTAGE"]},"format":{"description":"Format in which results will be returned.","type":"string","enum":["JSON","CSV"],"examples":["json"]}},"required":[],"additionalProperties":false}},"required":[],"additionalProperties":false},"name":"Get top layer 3 attack pairs (origin and target locations)","id":"cloudflare.radar-get-attacks-layer3-top-attacks","example":{},"maxRequests":1,"summary":false}}