get-traffic-flows
Retrieve and filter network traffic flows from the Illumio PCE using date ranges, source/destination criteria, services, and policy decisions for security analysis.
Instructions
Get traffic flows from the PCE with comprehensive filtering options
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| start_date | Yes | Starting datetime (YYYY-MM-DD or timestamp) | |
| end_date | Yes | Ending datetime (YYYY-MM-DD or timestamp) | |
| include_sources | No | Sources to include (label/IP list/workload HREFs, FQDNs, IPs) | |
| exclude_sources | No | Sources to exclude (label/IP list/workload HREFs, FQDNs, IPs) | |
| include_destinations | No | Destinations to include (label/IP list/workload HREFs, FQDNs, IPs) | |
| exclude_destinations | No | Destinations to exclude (label/IP list/workload HREFs, FQDNs, IPs) | |
| include_services | No | ||
| exclude_services | No | ||
| policy_decisions | No | ||
| exclude_workloads_from_ip_list_query | No | ||
| max_results | No | ||
| query_name | No |