AvantGuard - DNSFilter icon

AvantGuard - DNSFilter

AvantGuard - DNSFilter
Join our community

Actions277

Overview

This node operation, Traffic Reports Total Collections, retrieves aggregated traffic report data from a network monitoring or security service. It is designed to provide total collections of traffic statistics filtered by various criteria such as agents, applications, networks, and time ranges.

Typical use cases include:

  • Generating summary reports of network traffic for specific user agents or devices.
  • Monitoring allowed versus blocked traffic over custom time intervals.
  • Analyzing traffic sources (networks, agents, proxies) to identify patterns or security threats.
  • Filtering traffic data by organizational units or IP ranges for compliance or auditing purposes.

For example, a network administrator could use this node to get daily summaries of blocked traffic across all networks in their organization or to analyze traffic generated by specific user agents during business hours.

Properties

Name Meaning
Additional Query Parameters Optional filters and parameters to customize the traffic report query. Includes:
- Agent Ids Comma separated list of user agent UUIDs to filter by; defaults to all if empty.
- Agent Types Comma separated list of user agent types to filter by; defaults to all if empty.
- Application Ids Comma separated list of application IDs to filter by; defaults to all if empty.
- Bucket Size Desired bucket size for aggregation. Possible values: auto, 15min, 1day. Defaults to auto which selects 15 minutes buckets for less than 24h range, or 1 day buckets otherwise.
- Collection Ids Comma separated list of collection IDs to filter by; defaults to all if empty.
- From UTC lower limit datetime for the report in ISO format (YYYY-MM-DDThh:mm:ss or with Z). Defaults to current UTC datetime minus 1 day or if format is invalid.
- Mac Addresses Comma separated list of MAC addresses (without colons) or filter values; defaults to all if empty.
- Network Ids Comma separated list of network IDs to filter by; defaults to all if empty.
- Organization Ids Comma separated list of organization IDs to filter by; defaults to the user's organization ID if empty.
- Private Ip Filter by private LAN IP address.
- Private Ip From Lower limit of private LAN IP range filter.
- Private Ip To Upper limit of private LAN IP range filter.
- Security Report Boolean flag to indicate whether to include only threat-related reports (true), non-threats (false), or both (if not set). Defaults to true.
- Show Individual Networks Boolean flag to group report results by network ID. Defaults to false.
- Source Traffic source filter. Options: all, networks, agents, proxies. Defaults to all.
- To UTC upper limit datetime for the report in ISO format (YYYY-MM-DDThh:mm:ss or with Z). Defaults to current UTC datetime or if format is invalid.
- Type Type of report to retrieve. Options: all, allowed, blocked. Defaults to all.
- User Ids Comma separated list of local user IDs to filter by; defaults to all if empty.

Output

The node outputs JSON data representing the aggregated traffic report collections based on the specified filters. The structure typically includes:

  • Aggregated counts or metrics grouped by the selected bucket size (e.g., 15 minutes or 1 day).
  • Breakdown by traffic type (allowed, blocked).
  • Grouping by network, agent, or other dimensions if requested.
  • Metadata about the report period and applied filters.

If binary data output is supported, it would represent raw report files or exports, but this node primarily returns structured JSON data summarizing traffic totals.

Dependencies

  • Requires an API key credential for authenticating with the external traffic reporting service.
  • The node uses a base URL endpoint https://api.dnsfilter.com for requests.
  • Proper configuration of credentials and network access to the API endpoint is necessary.

Troubleshooting

  • Invalid Date Format: If the from or to date parameters are not in the correct ISO format, the node defaults to preset times but may return unexpected data ranges. Ensure dates follow YYYY-MM-DDThh:mm:ss or YYYY-MM-DDThh:mm:ssZ.
  • Empty Results: Using overly restrictive filters (e.g., very specific agent IDs or network IDs) might result in no data returned. Try broadening filters or removing some parameters.
  • Authentication Errors: Missing or incorrect API key credentials will cause authentication failures. Verify that the API key is correctly configured in n8n credentials.
  • API Rate Limits: Excessive requests or large data queries might hit API rate limits. Consider reducing query frequency or narrowing the time range.
  • Boolean Parameter Confusion: The security_report and show_individual_networks flags default to true but can be set false. Misconfiguration may lead to unexpected grouping or filtering.

Links and References

Discussion