{"command":{"effect":"read","timeoutSeconds":30,"inputSchema":{"type":"object","description":"Retrieves layer 7 attacks over time.","properties":{"query":{"type":"object","properties":{"aggInterval":{"description":"Aggregation interval of the results (e.g., in 15 minutes or 1 hour intervals). Refer to [Aggregation intervals](https://developers.cloudflare.com/radar/concepts/aggregation-intervals/). When omitted, the interval is auto-selected from the requested date range; finer intervals are only available for shorter ranges. If the requested interval is too granular for the date range, the request is rejected.","type":"string","enum":["15m","1h","1d","1w"],"examples":["1h"]},"name":{"description":"Array of names used to label the series in the response.","type":"array","items":{"type":"string","examples":["main_series"]}},"dateRange":{"description":"Filters results by relative date range ending at the current time, with each value producing a separate series. Use `<n>d` for days (up to `364d`) or `<n>w` for weeks (up to `52w`). Append `control` to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. `7dcontrol` covers days -14 to -7, `10dcontrol` covers days -24 to -14). For example, pass `7d` and `7dcontrol` to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including `control`) satisfy this automatically. Use this parameter or set specific start and end dates (`dateStart` and `dateEnd` parameters).","type":"array","items":{"pattern":"^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$","type":"string","examples":["7d"]},"examples":["7d"]},"dateStart":{"description":"Start of the date range. Alternative to `dateRange`; provide together with `dateEnd`. When requesting comparison series, every series must resolve to the same duration as the main series. Each `dateStart`/`dateEnd` is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.","type":"array","items":{"format":"date-time","type":"string"},"examples":["2023-09-01T11:41:33.782Z"]},"dateEnd":{"description":"End of the date range (inclusive). Alternative to `dateRange`; provide together with `dateStart`. When requesting comparison series, every series must resolve to the same duration as the main series. Each `dateStart`/`dateEnd` is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.","type":"array","items":{"format":"date-time","type":"string"},"examples":["2023-09-01T11:41:33.782Z"]},"asn":{"description":"Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with `-` to exclude ASNs from results. For example, `-174, 3356` excludes results from AS174, but includes results from AS3356.","type":"array","items":{"type":"string"},"examples":["15169"]},"location":{"description":"Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with `-` to exclude locations from results. For example, `-US,PT` excludes results from the US, but includes results from PT.","type":"array","items":{"type":"string"},"examples":["US,CA"]},"continent":{"description":"Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with `-` to exclude continents from results. For example, `-EU,NA` excludes results from EU, but includes results from NA.","type":"array","items":{"type":"string"},"examples":["EU,NA"]},"normalization":{"description":"Normalization method applied to the results. Refer to [Normalization methods](https://developers.cloudflare.com/radar/concepts/normalization/). `PERCENTAGE_CHANGE` requires exactly one comparison series (e.g. a `control` date range).","type":"string","enum":["PERCENTAGE_CHANGE","MIN0_MAX"],"examples":["MIN0_MAX"]},"ipVersion":{"description":"Filters results by IP version (Ipv4 vs. IPv6).","type":"array","items":{"enum":["IPv4","IPv6"],"type":"string"},"examples":["IPv4"]},"httpVersion":{"description":"Filters results by HTTP version.","type":"array","items":{"enum":["HTTPv1","HTTPv2","HTTPv3"],"type":"string"},"examples":["HTTPv1"]},"httpMethod":{"description":"Filters results by HTTP method.","type":"array","items":{"enum":["GET","POST","DELETE","PUT","HEAD","PURGE","OPTIONS","PROPFIND","MKCOL","PATCH","ACL","BCOPY","BDELETE","BMOVE","BPROPFIND","BPROPPATCH","CHECKIN","CHECKOUT","CONNECT","COPY","LABEL","LOCK","MERGE","MKACTIVITY","MKWORKSPACE","MOVE","NOTIFY","ORDERPATCH","POLL","PROPPATCH","REPORT","SEARCH","SUBSCRIBE","TRACE","UNCHECKOUT","UNLOCK","UNSUBSCRIBE","UPDATE","VERSIONCONTROL","BASELINECONTROL","XMSENUMATTS","RPC_OUT_DATA","RPC_IN_DATA","JSON","COOK","TRACK"],"type":"string"},"examples":["GET"]},"mitigationProduct":{"description":"Filters the results by layer 7 mitigation product.","type":"array","items":{"enum":["DDOS","WAF","BOT_MANAGEMENT","ACCESS_RULES","IP_REPUTATION","API_SHIELD","DATA_LOSS_PREVENTION"],"type":"string"}},"format":{"description":"Format in which results will be returned.","type":"string","enum":["JSON","CSV"],"examples":["json"]}},"required":[],"additionalProperties":false}},"required":[],"additionalProperties":false},"name":"Get layer 7 attacks time series","id":"cloudflare.radar-get-attacks-layer7-timeseries","example":{},"maxRequests":1,"summary":false}}