zcell_list_anomaly_policy_violations
List the ICCIDs that violated a Zscaler Cellular anomaly policy.
Instructions
List the ICCIDs that violated a Zscaler Cellular anomaly policy.
Read-only. Returns the policy rows carrying violation data over a days
lookback window. Use zcell_list_iccid_violations to drill into the
per-event detail for a specific ICCID.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| days | No | ||
| page | No | ||
| size | No | ||
| query | No | Optional JMESPath expression applied to the results after the API call, for client-side filtering and projection. Examples: "[?enabled==`true`]", "[*].{name: name, id: id}", "length(@)". Omit to get the full records. IMPORTANT: field names are the keys of the returned records, which are usually snake_case (`custom_category`) even where the Zscaler API documents camelCase (`customCategory`) — guessing the spelling yields an empty list that looks like a real answer. If you have not already seen a record from this tool, call it once without `query` and read the keys off the response. | |
| policy_id | Yes |