Illumio MCP Server

get-events

Retrieve and filter events from the Illumio PCE using event type, severity, status, and result limits for enhanced security policy management and analysis.

Instructions

Get events from the PCE

Input Schema

NameRequiredDescriptionDefault
event_typeNoFilter by event type (e.g., 'system_task.expire_service_account_api_keys')
max_resultsNoMaximum number of events to return
severityNoFilter by event severity
statusNoFilter by event status

Input Schema (JSON Schema)

{ "properties": { "event_type": { "description": "Filter by event type (e.g., 'system_task.expire_service_account_api_keys')", "type": "string" }, "max_results": { "default": 100, "description": "Maximum number of events to return", "type": "integer" }, "severity": { "description": "Filter by event severity", "enum": [ "emerg", "alert", "crit", "err", "warning", "notice", "info", "debug" ], "type": "string" }, "status": { "description": "Filter by event status", "enum": [ "success", "failure" ], "type": "string" } }, "type": "object" }
ID: xhqzxlo9iy