Chaitin Tech policylog/browserplugin/action/getfieldmetadata API
日志中心/浏览器插件/操作/字段元数据
OpenAPI Specification
openapi: 3.0.3
info:
title: APISec Management account policylog/browserplugin/action/getfieldmetadata API
version: '26.05'
description: Generated from APISec skyview APIView classes.
tags:
- name: policylog/browserplugin/action/getfieldmetadata
description: 日志中心/浏览器插件/操作/字段元数据
paths:
/policylog/browserplugin/action/getfieldmetadata:
post:
summary: 浏览器插件日志fieldmeta
deprecated: false
description: ''
tags:
- policylog/browserplugin/action/getfieldmetadata
parameters:
- name: X-CS-Header-App
in: header
description: 应用id
required: true
example: '{{app}}'
schema:
type: string
- name: X-CS-Header-Company
in: header
description: 公司id
required: true
example: '{{company_id}}'
schema:
type: string
- name: X-CS-Header-Crypt
in: header
description: 加密算法，请参考：https://servaltech.feishu.cn/docs/doccnQCZ2cw32uazgNSO0DFwceb
required: true
example: ''
schema:
type: string
- name: If-None-Match
in: header
description: 对于支持「ETAG」的接口，将上一次请求的响应header的Etag，填入到下一次请求。若匹配，则返回304（无变更），否则会返回新版本的数据 + 新Etag
required: true
example: string
schema:
type: string
- name: X-CS-Header-Debug
in: header
description: ''
required: true
example: '{{debug}}'
schema:
type: string
- name: Accept-Language
in: header
description: ''
required: true
example: zh
schema:
type: string
- name: X-Cs-Header-Timezone
in: header
description: ''
required: true
example: Asia/Shanghai
schema:
type: string
- name: Accept
in: header
description: ''
required: true
example: application/json
schema:
type: string
responses:
'200':
description: ''
content:
application/json:
schema:
type: object
properties:
code:
type: integer
msg:
type: string
data:
type: array
items:
type: object
properties:
field:
type: string
field_type:
type: string
display_name:
type: string
operators:
type: array
items:
type: object
properties:
name:
type: string
display_name:
type: string
value_type:
type: string
description:
type: string
required:
- name
- display_name
- value_type
- description
is_commonly_used:
type: boolean
options:
type: array
items:
type: object
properties:
name:
type: string
display_name:
type: string
has_template:
type: boolean
template:
type: string
variables:
type: array
items:
type: object
properties:
name:
type: string
display_name:
type: string
i18n_display_name:
type: object
properties:
zh-cn:
type: string
en:
type: string
zh-hant:
type: string
required:
- zh-cn
- en
- zh-hant
required:
- name
- display_name
- i18n_display_name
button:
type: array
items: {}
i18n_template:
type: object
properties:
zh-cn:
type: string
en:
type: string
zh-hant:
type: string
required:
- zh-cn
- en
- zh-hant
i18n_display_name:
type: object
properties:
zh-cn:
type: string
en:
type: string
zh-hant:
type: string
required:
- zh-cn
- en
- zh-hant
duration:
type: integer
required:
- name
- display_name
- has_template
- template
- variables
- button
- i18n_template
- i18n_display_name
- duration
nullable: true
async_options:
type: boolean
nullable: true
order:
type: integer
group:
type: string
submodule_exclude:
type: array
items:
type: string
is_order_used:
type: boolean
is_filter_used:
type: boolean
sort_options:
type: array
items:
type: object
properties:
name:
type: string
display_name:
type: string
required:
- name
- display_name
nullable: true
chart_options:
type: object
properties:
dimension:
type: object
properties:
status:
type: boolean
func:
type: array
items:
type: object
properties:
op:
type: string
name:
type: string
required:
- op
- name
required:
- status
- func
metric:
type: object
properties:
status:
type: boolean
func:
type: array
items:
type: object
properties:
op:
type: string
name:
type: string
required:
- op
- name
required:
- status
- func
required:
- dimension
- metric
required:
- field
- field_type
- display_name
- operators
- is_commonly_used
- options
- async_options
- order
- group
- submodule_exclude
- is_order_used
- is_filter_used
- sort_options
- chart_options
required:
- code
- msg
- data
example:
code: 0
msg: 正常
data:
- field: timestamp
field_type: date
display_name: 发生时间
operators: null
is_commonly_used: false
options: null
async_options: null
order: 0
group: 默认分组
submodule_exclude:
- ueba_check
is_order_used: true
is_filter_used: false
sort_options:
- name: desc
display_name: 降序
- name: asc
display_name: 升序
chart_options:
dimension:
status: true
func:
- op: terms
name: 分组聚合
- op: date_histogram
name: 时间间隔分组聚合
metric:
status: true
func:
- op: value_count
name: 计数
- field: uid
field_type: uid
display_name: 日志ID
operators:
- name: is
display_name: 等于
value_type: single
description: ==
is_commonly_used: false
options: null
async_options: false
order: 1
group: 日志信息
submodule_exclude:
- ueba_check
is_order_used: false
is_filter_used: true
sort_options: null
chart_options:
dimension:
status: true
func:
- op: terms
name: 分组聚合
metric:
status: true
func:
- op: value_count
name: 计数
- field: plugin_name
field_type: keyword
display_name: 插件名
operators:
- name: is
display_name: 等于
value_type: single
description: ==
- name: is_not
display_name: 不等于
value_type: single
description: '!='
- name: contains
display_name: 属于
value_type: multi
description: 在...集合
- name: not_contains
display_name: 不属于
value_type: multi
description: 不在...集合
- name: match
display_name: 包含(字符串)
value_type: single
description: contains
- name: not_match
display_name: 不包含(字符串)
value_type: single
description: not contains
is_commonly_used: true
options: null
async_options: true
order: 2
group: 浏览器管控
submodule_exclude: []
is_order_used: false
is_filter_used: true
sort_options: null
chart_options:
dimension:
status: true
func:
- op: terms
name: 分组聚合
metric:
status: true
func:
- op: value_count
name: 计数
- field: action
field_type: keyword
display_name: 处置动作
operators:
- name: is
display_name: 等于
value_type: single
description: ==
- name: is_not
display_name: 不等于
value_type: single
description: '!='
- name: contains
display_name: 属于
value_type: multi
description: 在...集合
- name: not_contains
display_name: 不属于
value_type: multi
description: 不在...集合
is_commonly_used: true
options:
- name: allow
display_name: 允许
has_template: false
template: ''
variables: []
button: []
i18n_template:
zh-cn: ''
en: ''
zh-hant: ''
i18n_display_name:
zh-cn: 允许
en: Allow
zh-hant: 允许
duration: 0
- name: plugin_remove
display_name: 移除插件
has_template: true
template: 「{{plugin_name}}」存在安全风险，可能造成您的数据泄露，依据公司数据安全政策，将执行插件移除操作。请点击下方按钮立即重启浏览器。
variables:
- name: plugin_name
display_name: 插件名
i18n_display_name:
zh-cn: 插件名
en: 插件名
zh-hant: 插件名
button: []
i18n_template:
zh-cn: 「{{plugin_name}}」存在安全风险，可能造成您的数据泄露，依据公司数据安全政策，将执行插件移除操作。请点击下方按钮立即重启浏览器。
en: 「{{plugin_name}}」存在安全风险，可能造成您的数据泄露，依据公司数据安全政策，将执行插件移除操作。请点击下方按钮立即重启浏览器。
zh-hant: 「{{plugin_name}}」存在安全风险，可能造成您的数据泄露，依据公司数据安全政策，将执行插件移除操作。请点击下方按钮立即重启浏览器。
i18n_display_name:
zh-cn: 移除插件
en: 移除插件
zh-hant: 移除插件
duration: 10
- name: block
display_name: 阻断运行
has_template: true
template: 「{{plugin_name}}」存在安全风险，可能造成您的数据泄露，依据公司数据安全政策，将执行插件禁用操作。请点击下方按钮立即重启浏览器。
variables:
- name: plugin_name
display_name: 插件名
i18n_display_name:
zh-cn: 插件名
en: 插件名
zh-hant: 插件名
button: []
i18n_template:
zh-cn: 「{{plugin_name}}」存在安全风险，可能造成您的数据泄露，依据公司数据安全政策，将执行插件禁用操作。请点击下方按钮立即重启浏览器。
en: 「{{plugin_name}}」存在安全风险，可能造成您的数据泄露，依据公司数据安全政策，将执行插件禁用操作。请点击下方按钮立即重启浏览器。
zh-hant: 「{{plugin_name}}」存在安全风险，可能造成您的数据泄露，依据公司数据安全政策，将执行插件禁用操作。请点击下方按钮立即重启浏览器。
i18n_display_name:
zh-cn: 阻断运行
en: 阻断运行
zh-hant: 阻断运行
duration: 10
- name: notify
display_name: 审计
has_template: false
template: ''
variables: []
button: []
i18n_template:
zh-cn: ''
en: ''
zh-hant: ''
i18n_display_name:
zh-cn: 审计
en: Audit
zh-hant: 审计
duration: 0
async_options: false
order: 3
group: 日志信息
submodule_exclude: []
is_order_used: false
is_filter_used: true
sort_options: null
chart_options:
dimension:
status: true
func:
- op: terms
name: 分组聚合
metric:
status: true
func:
- op: value_count
name: 计数
- field: staff_name
field_type: keyword
display_name: 员工姓名
operators:
- name: is
display_name: 等于
value_type: single
description: ==
- name: is_not
display_name: 不等于
value_type: single
description: '!='
- name: contains
display_name: 属于
value_type: multi
description: 在...集合
- name: not_contains
display_name: 不属于
value_type: multi
description: 不在...集合
- name: exists
display_name: 存在
value_type: none
description: exists
- name: not_exists
display_name: 不存在
value_type: none
description: not exists
is_commonly_used: false
options: null
async_options: true
order: 4
group: 员工信息
submodule_exclude:
- ueba_check
is_order_used: false
is_filter_used: true
sort_options: null
chart_options:
dimension:
status: true
func:
- op: terms
name: 分组聚合
metric:
status: true
func:
- op: value_count
name: 计数
- field: staff_number
field_type: keyword
display_name: 员工工号
operators:
- name: is
display_name: 等于
value_type: single
description: ==
- name: is_not
display_name: 不等于
value_type: single
description: '!='
- name: contains
display_name: 属于
value_type: multi
description: 在...集合
- name: not_contains
display_name: 不属于
value_type: multi
description: 不在...集合
is_commonly_used: false
options: null
async_options: true
order: 5
group: 员工信息
submodule_exclude:
- ueba_check
is_order_used: false
is_filter_used: true
sort_options: null
chart_options:
dimension:
status: true
func:
- op: terms
name: 分组聚合
metric:
status: true
func:
- op: value_count
name: 计数
- field: device_code
field_type: keyword
display_name: 终端ID
operators:
- name: is
display_name: 等于
value_type: single
description: ==
- name: is_not
display_name: 不等于
value_type: single
description: '!='
- name: contains
display_name: 属于
value_type: multi
description: 在...集合
- name: not_contains
display_name: 不属于
value_type: multi
description: 不在...集合
is_commonly_used: false
options: null
async_options: true
order: 6
group: 终端信息
submodule_exclude:
- ueba_check
is_order_used: false
is_filter_used: true
sort_options: null
chart_options:
dimension:
status: true
func:
- op: terms
name: 分组聚合
metric:
status: true
func:
- op: value_count
name: 计数
- field: ip_address
field_type: keyword
display_name: IP地址
operators:
- name: is
display_name: 等于
value_type: single
description: ==
- name: is_not
display_name: 不等于
value_type: single
description: '!='
- name: contains
display_name: 属于
value_type: multi
description: 在...集合
- name: not_contains
display_name: 不属于
value_type: multi
description: 不在...集合
- name: match
display_name: 包含(字符串)
value_type: single
description: contains
- name: not_match
display_name: 不包含(字符串)
value_type: single
description: not contains
- name: multi_wildcard
display_name: 多项模糊匹配
value_type: multi
description: multi match
is_commonly_used: false
options: null
async_options: true
order: 7
group: 终端信息
submodule_exclude:
- ueba_check
is_order_used: false
is_filter_used: true
sort_options: null
chart_options:
dimension:
status: true
func:
- op: terms
name: 分组聚合
metric:
status: true
func:
- op: value_count
name: 计数
- field: console_user
field_type: keyword
display_name: 系统账户
operators:
- name: is
display_name: 等于
value_type: single
description: ==
- name: is_not
display_name: 不等于
value_type: single
description: '!='
- name: contains
display_name: 属于
value_type: multi
description: 在...集合
- name: not_contains
display_name: 不属于
value_type: multi
description: 不在...集合
- name: match
display_name: 包含(字符串)
value_type: single
description: contains
- name: not_match
display_name: 不包含(字符串)
value_type: single
description: not contains
- name: multi_wildcard
display_name: 多项模糊匹配
value_type: multi
description: multi match
is_commonly_used: false
options: null
async_options: true
order: 8
group: 终端信息
submodule_exclude:
- ueba_check
is_order_used: false
is_filter_used: true
sort_options: null
chart_options:
dimension:
status: true
func:
- op: terms
name: 分组聚合
metric:
status: true
func:
- op: value_count
name: 计数
- field: os_name
field_type: keyword
display_name: 操作系统
operators:
- name: is
display_name: 等于
value_type: single
description: ==
- name: is_not
display_name: 不等于
value_type: single
description: '!='
- name: contains
display_name: 属于
value_type: multi
description: 在...集合
- name: not_contains
display_name: 不属于
value_type: multi
description: 不在...集合
is_commonly_used: true
options: null
async_options: true
order: 9
group: 终端信息
submodule_exclude: []
is_order_used: false
is_filter_used: true
sort_options: null
chart_options:
dimension:
status: true
func:
- op: terms
name: 分组聚合
metric:
status: true
func:
- op: value_count
name: 计数
- field: staff_code
field_type: keyword
display_name: 员工账户
operators:
- name: is
display_name: 等于
value_type: single
description: ==
- name: is_not
display_name: 不等于
value_type: single
description: '!='
- name: contains
display_name: 属于
value_type: multi
description: 在...集合
- name: not_contains
display_name: 不属于
value_type: multi
description: 不在...集合
- name: exists
display_name: 存在
value_type: none
description: exists
- name: not_exists
display_name: 不存在
value_type: none
description: not exists
is_commonly_used: false
options: null
async_options: true
order: 10
group: 员工信息
submodule_exclude:
- ueba_check
is_order_used: false
is_filter_used: true
sort_options: null
chart_options:
dimension:
status: true
func:
- op: terms
name: 分组聚合
metric:
status: true
func:
- op: value_count
name: 计数
- field: dept_names
field_type: keyword
display_
# --- truncated at 32 KB (50 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/chaitin/refs/heads/main/openapi/chaitin-policylog-browserplugin-action-getfieldmetadata-api-openapi.yml