{"command":{"effect":"read","timeoutSeconds":30,"inputSchema":{"type":"object","description":"Retrieves the top attacks from origin to target location. Values are percentages of the total layer 7 attacks (with billing country). The attack magnitude can be defined by the number of mitigated requests or by the number of zones affected. You can optionally limit the number of attacks by origin/target location (useful if all the top attacks are from or to the same location).","properties":{"query":{"type":"object","properties":{"limit":{"description":"Limits the number of objects returned in the response.","type":"integer","default":5,"exclusiveMinimum":0,"examples":[5]},"name":{"description":"Array of names used to label the series in the response.","type":"array","items":{"type":"string","examples":["main_series"]}},"dateRange":{"description":"Filters results by relative date range ending at the current time, with each value producing a separate series. Use `<n>d` for days (up to `364d`) or `<n>w` for weeks (up to `52w`). Append `control` to request the equivalent previous period for comparison: the comparison window is shifted back by the current window's length rounded up to a whole number of weeks, so it keeps the same weekday alignment and does not overlap the current window (e.g. `7dcontrol` covers days -14 to -7, `10dcontrol` covers days -24 to -14). For example, pass `7d` and `7dcontrol` to compare this week with the previous week. All series must resolve to the same duration as the main series; relative ranges (including `control`) satisfy this automatically. Use this parameter or set specific start and end dates (`dateStart` and `dateEnd` parameters).","type":"array","items":{"pattern":"^((([1-9]|[1-9][0-9]|[1-2][0-9][0-9]|3[0-5][0-9]|36[0-4])[d](control)?)|(([1-9]|[1-4][0-9]|5[0-2])[w](control)?))$","type":"string","examples":["7d"]},"examples":["7d"]},"dateStart":{"description":"Start of the date range. Alternative to `dateRange`; provide together with `dateEnd`. When requesting comparison series, every series must resolve to the same duration as the main series. Each `dateStart`/`dateEnd` is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.","type":"array","items":{"format":"date-time","type":"string"},"examples":["2023-09-01T11:41:33.782Z"]},"dateEnd":{"description":"End of the date range (inclusive). Alternative to `dateRange`; provide together with `dateStart`. When requesting comparison series, every series must resolve to the same duration as the main series. Each `dateStart`/`dateEnd` is floored to the nearest 15 minutes before evaluation, so windows whose durations match only before alignment may be rejected.","type":"array","items":{"format":"date-time","type":"string"},"examples":["2023-09-01T11:41:33.782Z"]},"asn":{"description":"Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with `-` to exclude ASNs from results. For example, `-174, 3356` excludes results from AS174, but includes results from AS3356.","type":"array","items":{"type":"string"},"examples":["15169"]},"location":{"description":"Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with `-` to exclude locations from results. For example, `-US,PT` excludes results from the US, but includes results from PT.","type":"array","items":{"type":"string"},"examples":["US,CA"]},"continent":{"description":"Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with `-` to exclude continents from results. For example, `-EU,NA` excludes results from EU, but includes results from NA.","type":"array","items":{"type":"string"},"examples":["EU,NA"]},"mitigationProduct":{"description":"Filters the results by layer 7 mitigation product.","type":"array","items":{"enum":["DDOS","WAF","BOT_MANAGEMENT","ACCESS_RULES","IP_REPUTATION","API_SHIELD","DATA_LOSS_PREVENTION"],"type":"string"}},"limitDirection":{"description":"Specifies whether the `limitPerLocation` applies to the source or target location.","type":"string","default":"ORIGIN","enum":["ORIGIN","TARGET"],"examples":["ORIGIN"]},"limitPerLocation":{"description":"Limits the number of attacks per origin/target (refer to `limitDirection` parameter) location.","type":"integer","default":10,"exclusiveMinimum":0,"examples":[10]},"normalization":{"description":"Normalization method applied to the results. Refer to [Normalization methods](https://developers.cloudflare.com/radar/concepts/normalization/).","type":"string","default":"PERCENTAGE","enum":["PERCENTAGE","MIN_MAX"],"examples":["PERCENTAGE"]},"format":{"description":"Format in which results will be returned.","type":"string","enum":["JSON","CSV"],"examples":["json"]}},"required":[],"additionalProperties":false}},"required":[],"additionalProperties":false},"name":"Get top layer 7 attack pairs (origin and target locations)","id":"cloudflare.radar-get-attacks-layer7-top-attacks","example":{},"maxRequests":1,"summary":false}}