zdx_get_deeptrace_events
Obtain curated, nested JSON events from a ZDX deep trace with ISO timestamps. Optionally filter results using JMESPath expressions.
Instructions
Get the events captured during a ZDX deep trace (curated, nested JSON with ISO timestamps). Read-only.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | No | Optional JMESPath expression applied to the results after the API call, for client-side filtering and projection. Field names are exactly what the Zscaler API returns. Examples: "[?enabled==`true`]", "[*].{name: name, id: id}", "length(@)". Omit to get the full records. | |
| trace_id | Yes | ||
| device_id | Yes |