get-traffic-flows

Extract and filter traffic flows from the Illumio PCE using start/end dates, sources, destinations, services, and policy decisions for precise network analysis.

Instructions

Get traffic flows from the PCE with comprehensive filtering options

Input Schema

Name	Required	Description
`end_date`	Yes	Ending datetime (YYYY-MM-DD or timestamp)
`exclude_destinations`	No	Destinations to exclude (label/IP list/workload HREFs, FQDNs, IPs)
`exclude_services`	No
`exclude_sources`	No	Sources to exclude (label/IP list/workload HREFs, FQDNs, IPs)
`exclude_workloads_from_ip_list_query`	No
`include_destinations`	No	Destinations to include (label/IP list/workload HREFs, FQDNs, IPs)
`include_services`	No
`include_sources`	No	Sources to include (label/IP list/workload HREFs, FQDNs, IPs)
`max_results`	No
`policy_decisions`	No
`query_name`	No
`start_date`	Yes	Starting datetime (YYYY-MM-DD or timestamp)

Input Schema (JSON Schema)

{
  "properties": {
    "end_date": {
      "description": "Ending datetime (YYYY-MM-DD or timestamp)",
      "type": "string"
    },
    "exclude_destinations": {
      "description": "Destinations to exclude (label/IP list/workload HREFs, FQDNs, IPs)",
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "exclude_services": {
      "items": {
        "properties": {
          "port": {
            "type": "integer"
          },
          "proto": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "type": "array"
    },
    "exclude_sources": {
      "description": "Sources to exclude (label/IP list/workload HREFs, FQDNs, IPs)",
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "exclude_workloads_from_ip_list_query": {
      "type": "boolean"
    },
    "include_destinations": {
      "description": "Destinations to include (label/IP list/workload HREFs, FQDNs, IPs)",
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "include_services": {
      "items": {
        "properties": {
          "port": {
            "type": "integer"
          },
          "proto": {
            "type": "string"
          }
        },
        "type": "object"
      },
      "type": "array"
    },
    "include_sources": {
      "description": "Sources to include (label/IP list/workload HREFs, FQDNs, IPs)",
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "max_results": {
      "type": "integer"
    },
    "policy_decisions": {
      "items": {
        "enum": [
          "allowed",
          "blocked",
          "potentially_blocked",
          "unknown"
        ],
        "type": "string"
      },
      "type": "array"
    },
    "query_name": {
      "type": "string"
    },
    "start_date": {
      "description": "Starting datetime (YYYY-MM-DD or timestamp)",
      "type": "string"
    }
  },
  "required": [
    "start_date",
    "end_date"
  ],
  "type": "object"
}

Illumio MCP Server

get-traffic-flows

Instructions

Input Schema

Input Schema (JSON Schema)

Other Tools from Illumio MCP Server

Related Tools

MCP directory API