AvantGuard - DNSFilter icon

AvantGuard - DNSFilter

AvantGuard - DNSFilter
Join our community

Actions277

Overview

This node operation, Traffic Reports Total Applications Users Stats, retrieves aggregated statistics about application usage by users from traffic reports. It is designed to provide detailed insights into user activity related to applications within a network or organization over a specified time range.

Typical use cases include:

  • Monitoring total application usage by users for security audits.
  • Generating reports on allowed or blocked application traffic.
  • Filtering traffic data by various criteria such as user IDs, application categories, network IDs, and more.
  • Analyzing threat-related traffic when the security report option is enabled.

For example, a network administrator could use this node to generate a report showing all blocked application traffic for specific user agents during the last week, helping identify potential security threats or policy violations.

Properties

Name Meaning
Additional Query Parameters Optional filters to refine the traffic report query. Includes:
- Agent Ids: Comma separated list of user agent UUIDs (defaults to all).
- Agent Types: Comma separated list of user agent types.
- Application Category Ids: Comma separated list of application category IDs.
- Application Ids: Comma separated list of application IDs.
- Collection Ids: Comma separated list of collection IDs.
- From: Report UTC lower limit datetime in ISO format.
- Mac Addresses: Comma separated list of MAC addresses (without colons).
- Name: Filter local users whose name contains this value.
- Nat Ips: Comma separated list of NAT IPs (valid integers 101 to 106).
- Network Ids: Comma separated list of network IDs.
- Organization Ids: Comma separated list of organization IDs (defaults to user org ID).
- Private Ip: Private LAN IP.
- Private Ip From: Private LAN IP range lower limit.
- Private Ip To: Private LAN IP range upper limit.
- Security Report: Boolean to include only threats (true), non-threats (false), or both (empty). Defaults to true.
- Source: Traffic source filter with options: All, Networks, Agents, Proxies. Defaults to All.
- To: Report UTC upper limit datetime in ISO format.
- Type: Type of report with options: All, Allowed, Blocked. Defaults to All.
- User Ids: Comma separated list of local user IDs.

Output

The node outputs JSON data containing aggregated statistics about total application usage by users based on the applied filters. The structure typically includes counts and summaries grouped by application, user, or other relevant dimensions depending on the API response.

If binary data were supported, it would represent downloadable report files or similar content; however, this node focuses on JSON output.

Dependencies

  • Requires an API key credential for authenticating requests to the external traffic reporting service.
  • The node uses a base URL endpoint https://api.dnsfilter.com for making HTTP requests.
  • Proper configuration of credentials and network access to the API endpoint is necessary.

Troubleshooting

  • Invalid Date Format: If the from or to date parameters are not in the correct ISO format (YYYY-MM-DDThh:mm:ss or with trailing Z), the API may default to current UTC minus one day or current UTC respectively, or return an error. Ensure dates are correctly formatted.
  • Empty or Incorrect Filters: Providing invalid IDs or malformed comma-separated lists can result in no data returned or errors. Verify that IDs correspond to valid entities.
  • Authentication Errors: Missing or incorrect API key credentials will cause authentication failures. Confirm that the API key is set up correctly in n8n credentials.
  • Network Issues: Connectivity problems to the API endpoint will prevent data retrieval. Check firewall and proxy settings.
  • Boolean Parameter Misuse: The security_report parameter expects a boolean; passing other types might cause unexpected results.

Links and References

Discussion