AvantGuard - DNSFilter icon

AvantGuard - DNSFilter

AvantGuard - DNSFilter
Join our community

Actions277

Overview

This node operation, Traffic Reports Total Organizations Stats, retrieves aggregated traffic statistics for organizations. It is designed to query detailed traffic data such as allowed or blocked network requests, filtered by various criteria like user agents, application categories, and time ranges.

Typical use cases include:

  • Monitoring overall network traffic patterns across multiple organizations.
  • Generating security reports that highlight threats or suspicious activities.
  • Analyzing usage trends by filtering on specific users, applications, or device types.
  • Creating custom dashboards or alerts based on traffic volume or security events.

For example, a network administrator could use this node to get daily summaries of blocked traffic for all organizations managed under their MSP account, filtered by certain application categories or user groups.

Properties

Name Meaning
Additional Query Parameters Optional filters and parameters to customize the report output. These include:
- Agent Ids: Comma-separated list of user agent UUIDs (defaults to all).
- Agent Types: Comma-separated list of user agent types.
- Application Category Ids: Comma-separated list of application category IDs.
- Bucket Size: Desired bucket size for aggregation (auto, 15min, 1day). Defaults to auto which adjusts based on date range.
- Collection Ids: Comma-separated list of collection IDs.
- From: UTC start datetime for the report in ISO format.
- Msp Id: Managed Service Provider ID.
- Name: Filter applications whose display name contains this string.
- Organization Id: Organization ID to filter by; defaults to user's organization.
- Security Report: Boolean to specify if only threat reports should be included (true), excluded (false), or both (if empty).
- To: UTC end datetime for the report in ISO format.
- Type: Type of report to retrieve (all, allowed, blocked). Defaults to all.
- User Ids: Comma-separated list of local user IDs.

Output

The node outputs JSON data containing aggregated traffic statistics according to the specified filters. The structure typically includes summary metrics grouped by organization, time buckets, or other dimensions depending on the query parameters.

The exact fields depend on the API response but generally include counts of allowed and blocked traffic, threat indicators, timestamps, and identifiers for organizations or users.

No binary data output is indicated for this operation.

Dependencies

  • Requires an API key credential for authenticating with the AvantGuard DNSFilter service.
  • The node uses the base URL https://api.dnsfilter.com to send requests.
  • Proper configuration of the API authentication token in n8n credentials is necessary.
  • The node depends on the external AvantGuard DNSFilter API to fetch traffic report data.

Troubleshooting

  • Invalid Date Format: If the from or to date parameters are not in the correct ISO format (YYYY-MM-DDThh:mm:ss or with trailing Z), the API may default to current dates or return errors. Ensure proper formatting.
  • Empty or Incorrect Filters: Providing invalid IDs or malformed comma-separated lists can result in no data returned or API errors.
  • Authentication Errors: Missing or incorrect API credentials will cause authorization failures.
  • API Rate Limits: Excessive requests might be throttled by the external service.
  • Unexpected Empty Results: Check that the date range and filters actually match existing data.

Links and References

Discussion