openapi: 3.2.0
info:
  title: Palo Alto Networks Audits API
  version: '1.0'
  description: 'Operations tagged Audits across 4 of this provider''s published API definitions: palo-alto-compute-34-03-openapi-34-03-138-sh-openapi.json, palo-alto-compute-openapi-34-04-145-sh-openapi.json, palo-alto-cwpp-34-03-openapi-34-03-138-saas-openapi.json, palo-alto-cwpp-openapi-34-04-145-saas-openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: PATH_TO_CONSOLE
tags:
- name: Audits
  description: Audits. 48 operations in this definition.
  x-description-source: desc/audits/audits.md
paths:
  /api/v34.03/audits/access:
    get:
      description: 'Get Docker Access Audit Events. GET /api/v34.03/audits/access on the Audits API. Takes 13 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Type is the audit type.

          '
        in: query
        name: type
        schema:
          type: string
      - description: 'RuleNames are the rules names to filter by.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames are the rules names to filter by.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'APIs are apis to filter by.

          '
        in: query
        name: api
        schema:
          description: 'APIs are apis to filter by.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts are hosts to filter by.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts are hosts to filter by.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users are users to filter by.

          '
        in: query
        name: user
        schema:
          description: 'Users are users to filter by.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Allow indicated whether allowed requests should be shown.

          '
        in: query
        name: allow
        schema:
          type: string
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.Audit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorAccessDocker
      operationId: get-audits-access
      summary: Get Docker Access Audit Events
      x-description-source: desc/audits/access_get.md
  /api/v34.03/audits/access/download:
    get:
      description: 'Download Docker Access Audit Events. GET /api/v34.03/audits/access/download on the Audits API. Takes 13 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Type is the audit type.

          '
        in: query
        name: type
        schema:
          type: string
      - description: 'RuleNames are the rules names to filter by.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames are the rules names to filter by.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'APIs are apis to filter by.

          '
        in: query
        name: api
        schema:
          description: 'APIs are apis to filter by.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts are hosts to filter by.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts are hosts to filter by.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users are users to filter by.

          '
        in: query
        name: user
        schema:
          description: 'Users are users to filter by.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Allow indicated whether allowed requests should be shown.

          '
        in: query
        name: allow
        schema:
          type: string
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorAccessDocker
      operationId: get-audits-access-download
      summary: Download Docker Access Audit Events
      x-description-source: desc/audits/access_download_get.md
  /api/v34.03/audits/admission:
    get:
      description: 'Get Admission Audit Events. GET /api/v34.03/audits/admission on the Audits API. Takes 10 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the activity.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the activity.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Operations is the list of operations to use for filtering.

          '
        in: query
        name: operation
        schema:
          description: 'Operations is the list of operations to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_admission.Audit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorAccessKubernetes
      operationId: get-audits-admission
      summary: Get Admission Audit Events
      x-description-source: desc/audits/admission_get.md
  /api/v34.03/audits/admission/download:
    get:
      description: 'Download Admission Audit Events. GET /api/v34.03/audits/admission/download on the Audits API. Takes 10 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the activity.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the activity.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Operations is the list of operations to use for filtering.

          '
        in: query
        name: operation
        schema:
          description: 'Operations is the list of operations to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorAccessKubernetes
      operationId: get-audits-admission-download
      summary: Download Admission Audit Events
      x-description-source: desc/audits/admission_download_get.md
  /api/v34.03/audits/firewall/app/agentless:
    get:
      description: 'Get WAAS Agentless Audit Events. GET /api/v34.03/audits/firewall/app/agentless on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.AppFirewallAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-agentless
      summary: Get WAAS Agentless Audit Events
      x-description-source: desc/audits/waas_agentless_get.md
  /api/v34.03/audits/firewall/app/agentless/download:
    get:
      description: 'Download WAAS Agentless Audit Events. GET /api/v34.03/audits/firewall/app/agentless/download on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-agentless-download
      summary: Download WAAS Agentless Audit Events
      x-description-source: desc/audits/waas_agentless_download_get.md
  /api/v34.03/audits/firewall/app/agentless/timeslice:
    get:
      description: 'Get WAAS Agentless Audit Events for a Timeframe. GET /api/v34.03/audits/firewall/app/agentless/timeslice on the Audits API. Takes 39 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Buckets is the number of buckets to return.

          '
        in: query
        name: buckets
        schema:
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.AuditTimeslice'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-agentless-timeslice
      summary: Get WAAS Agentless Audit Events for a Timeframe
      x-description-source: desc/audits/waas_agentless_timeslice_get.md
  /api/v34.03/audits/firewall/app/app-embedded:
    get:
      description: 'Get WAAS App-embedded Audit Events. GET /api/v34.03/audits/firewall/app/app-embedded on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.AppFirewallAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-app-embedded
      summary: Get WAAS App-embedded Audit Events
      x-description-source: desc/audits/waas_app_embedded_get.md
  /api/v34.03/audits/firewall/app/app-embedded/download:
    get:
      description: 'Download WAAS App-embedded Audit Events. GET /api/v34.03/audits/firewall/app/app-embedded/download on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-app-embedded-download
      summary: Download WAAS App-embedded Audit Events
      x-description-source: desc/audits/waas_app_embedded_download_get.md
  /api/v34.03/audits/firewall/app/app-embedded/timeslice:
    get:
      description: 'Get WAAS App-embedded Audit Events for a Timeframe. GET /api/v34.03/audits/firewall/app/app-embedded/timeslice on the Audits API. Takes 39 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Buckets is the number of buckets to return.

          '
        in: query
        name: buckets
        schema:
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.AuditTimeslice'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-app-embedded-timeslice
      summary: Get WAAS App-embedded Audit Events for a Timeframe
      x-description-source: desc/audits/waas_app_embedded_timeslice_get.md
  /api/v34.03/audits/firewall/app/container:
    get:
      description: 'Get WAAS Container Audit Events. GET /api/v34.03/audits/firewall/app/container on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.AppFirewallAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-container
      summary: Get WAAS Container Audit Events
      x-description-source: desc/audits/waas_container_get.md
  /api/v34.03/audits/firewall/app/container/download:
    get:
      description: 'Download WAAS Container Audit Events. GET /api/v34.03/audits/firewall/app/container/download on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-container-download
      summary: Download WAAS Container Audit Events
      x-description-source: desc/audits/waas_container_download_get.md
  /api/v34.03/audits/firewall/app/container/timeslice:
    get:
      description: 'Get WAAS Container Audit Timeslice. GET /api/v34.03/audits/firewall/app/container/timeslice on the Audits API. Takes 39 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Buckets is the number of buckets to return.

          '
        in: query
        name: buckets
        schema:
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.AuditTimeslice'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-container-timeslice
      summary: Get WAAS Container Audit Timeslice
      x-description-source: desc/audits/waas_container_timeslice_get.md
  /api/v34.03/audits/firewall/app/host:
    get:
      description: 'Get WAAS Host Audit Events. GET /api/v34.03/audits/firewall/app/host on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.AppFirewallAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-host
      summary: Get WAAS Host Audit Events
      x-description-source: desc/audits/waas_host_get.md
  /api/v34.03/audits/firewall/app/host/download:
    get:
      description: 'Download WAAS Host Audit Events. GET /api/v34.03/audits/firewall/app/host/download on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-host-download
      summary: Download WAAS Host Audit Events
      x-description-source: desc/audits/waas_host_download_get.md
  /api/v34.03/audits/firewall/app/host/timeslice:
    get:
      description: 'Get WAAS Host Audit Timeslice. GET /api/v34.03/audits/firewall/app/host/timeslice on the Audits API. Takes 39 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Buckets is the number of buckets to return.

          '
        in: query
        name: buckets
        schema:
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.AuditTimeslice'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-host-timeslice
      summary: Get WAAS Host Audit Timeslice
      x-description-source: desc/audits/waas_host_timeslice_get.md
  /api/v34.03/audits/firewall/app/serverless:
    get:
      description: 'Get WAAS Serverless Audit Events. GET /api/v34.03/audits/firewall/app/serverless on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.AppFirewallAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-serverless
      summary: Get WAAS Serverless Audit Events
      x-description-source: desc/audits/waas_serverless_get.md
  /api/v34.03/audits/firewall/app/serverless/download:
    get:
      description: 'Download WAAS Serverless Audit Events. GET /api/v34.03/audits/firewall/app/serverless/download on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-serverless-download
      summary: Download WAAS Serverless Audit Events
      x-description-source: desc/audits/waas_serverless_download_get.md
  /api/v34.03/audits/firewall/app/serverless/timeslice:
    get:
      description: 'Get WAAS Serverless Audit Events for a Timeframe. GET /api/v34.03/audits/firewall/app/serverless/timeslice on the Audits API. Takes 39 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Buckets is the number of buckets to return.

          '
        in: query
        name: buckets
        schema:
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.AuditTimeslice'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-serverless-timeslice
      summary: Get WAAS Serverless Audit Events for a Timeframe
      x-description-source: desc/audits/waas_serverless_timeslice_get.md
  /api/v34.03/audits/firewall/network/container:
    get:
      description: 'Get CNNS Container Audit Events. GET /api/v34.03/audits/firewall/network/container on the Audits API. Takes 9 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audits.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audits.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'SrcImages are the source images filter.

          '
        in: query
        name: srcImageName
        schema:
          description: 'SrcImages are the source images filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'DstImages are the destination images filter.

          '
        in: query
        name: dstImageName
        schema:
          description: 'DstImages are the destination images filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Block is the block/audit filter.

          '
        in: query
        name: block
        schema:
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.ContainerNetworkFirewallProfileAudits'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorCNNF
      operationId: get-audits-firewall-network-container
      summary: Get CNNS Container Audit Events
      x-description-source: desc/audits/firewall_network_container_get.md
  /api/v34.03/audits/firewall/network/container/download:
    get:
      description: 'Download CNNS Container Audit Events. GET /api/v34.03/audits/firewall/network/container/download on the Audits API. Takes 9 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audits.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audits.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'SrcImages are the source images filter.

          '
        in: query
        name: srcImageName
        schema:
          description: 'SrcImages are the source images filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'DstImages are the destination images filter.

          '
        in: query
        name: dstImageName
        schema:
          description: 'DstImages are the destination images filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Block is the block/audit filter.

          '
        in: query
        name: block
        schema:
          type: string
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorCNNF
      operationId: get-audits-firewall-network-container-download
      summary: Download CNNS Container Audit Events
      x-description-source: desc/audits/firewall_network_container_download_get.md
  /api/v34.03/audits/firewall/network/host:
    get:
      description: 'Get CNNS Host Audit Events. GET /api/v34.03/audits/firewall/network/host on the Audits API. Takes 8 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audits.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audits.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'SrcHostname are the source hostnames filter.

          '
        in: query
        name: srcHostnames
        schema:
          description: 'SrcHostname are the source hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'DstHostname are the destination hostnames filter.

          '
        in: query
        name: dstHostnames
        schema:
          description: 'DstHostname are the destination hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.HostNetworkFirewallProfileAudits'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorCNNF
      operationId: get-audits-firewall-network-host
      summary: Get CNNS Host Audit Events
      x-description-source: desc/audits/firewall_network_host_get.md
  /api/v34.03/audits/firewall/network/host/download:
    get:
      description: 'Download CNNS Host Audit Events. GET /api/v34.03/audits/firewall/network/host/download on the Audits API. Takes 8 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audits.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audits.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'SrcHostname are the source hostnames filter.

          '
        in: query
        name: srcHostnames
        schema:
          description: 'SrcHostname are the source hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'DstHostname are the destination hostnames filter.

          '
        in: query
        name: dstHostnames
        schema:
          description: 'DstHostname are the destination hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorCNNF
      operationId: get-audits-firewall-network-host-download
      summary: Download CNNS Host Audit Events
      x-description-source: desc/audits/firewall_network_host_download_get.md
  /api/v34.03/audits/incidents:
    get:
      description: 'Get Incident Audit Events. GET /api/v34.03/audits/incidents on the Audits API. Takes 17 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'Filters results from a start datetime.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'Filters results from an end datetime.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Filters results by hostname where the incident occurred.

          '
        in: query
        name: hostname
        schema:
          description: 'Filters results by hostname where the incident occurred.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by incident category.

          '
        in: query
        name: category
        schema:
          description: 'Filters results by incident category.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by incident type.

          '
        in: query
        name: type
        schema:
          description: 'Filters results by incident type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by runtime profile ID.

          '
        in: query
        name: profileID
        schema:
          description: 'Filters results by runtime profile ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by incidents that have been acknowledged.

          '
        in: query
        name: acknowledged
        schema:
          type: string
      - description: 'Filters results by region (for functions)

          Filters results by cluster name.

          '
        in: query
        name: cluster
        schema:
          description: 'Filters results by region (for functions)

            Filters results by cluster name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by ID.

          '
        in: query
        name: id
        schema:
          description: 'Filters results by ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by app IDs.

          '
        in: query
        name: appID
        schema:
          description: 'Filters results by app IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by container IDs.

          '
        in: query
        name: containerID
        schema:
          description: 'Filters results by container IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by function IDs.

          '
        in: query
        name: functionID
        schema:
          description: 'Filters results by function IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by custom rule names.

          '
        in: query
        name: customRuleName
        schema:
          description: 'Filters results by custom rule names.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.Incident'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeIncidents
      operationId: get-audits-incidents
      summary: Get Incident Audit Events
      x-description-source: desc/audits/incidents_get.md
  /api/v34.03/audits/incidents/acknowledge/{id}:
    patch:
      description: 'Archive an Incident Audit Event. PATCH /api/v34.03/audits/incidents/acknowledge/{id} on the Audits API. Takes 1 path parameter, an optional request body. Documented responses: 200.'
      parameters:
      - in: path
        name: id
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/shared.Incident'
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeIncidents
      operationId: patch-audits-incidents-acknowledge-id
      summary: Archive an Incident Audit Event
      x-description-source: desc/audits/incidents_archive_patch.md
  /api/v34.03/audits/incidents/download:
    get:
      description: 'Download Incident Audit Events. GET /api/v34.03/audits/incidents/download on the Audits API. Takes 17 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'Filters results from a start datetime.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'Filters results from an end datetime.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Filters results by hostname where the incident occurred.

          '
        in: query
        name: hostname
        schema:
          description: 'Filters results by hostname where the incident occurred.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by incident category.

          '
        in: query
        name: category
        schema:
          description: 'Filters results by incident category.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by incident type.

          '
        in: query
        name: type
        schema:
          description: 'Filters results by incident type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by runtime profile ID.

          '
        in: query
        name: profileID
        schema:
          description: 'Filters results by runtime profile ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by incidents that have been acknowledged.

          '
        in: query
        name: acknowledged
        schema:
          type: string
      - description: 'Filters results by region (for functions)

          Filters results by cluster name.

          '
        in: query
        name: cluster
        schema:
          description: 'Filters results by region (for functions)

            Filters results by cluster name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by ID.

          '
        in: query
        name: id
        schema:
          description: 'Filters results by ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by app IDs.

          '
        in: query
        name: appID
        schema:
          description: 'Filters results by app IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by container IDs.

          '
        in: query
        name: containerID
        schema:
          description: 'Filters results by container IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by function IDs.

          '
        in: query
        name: functionID
        schema:
          description: 'Filters results by function IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by custom rule names.

          '
        in: query
        name: customRuleName
        schema:
          description: 'Filters results by custom rule names.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeIncidents
      operationId: get-audits-incidents-download
      summary: Download Incident Audit Events
      x-description-source: desc/audits/incidents_download_get.md
  /api/v34.03/audits/kubernetes:
    get:
      description: 'Get Kubernetes Audit Events. GET /api/v34.03/audits/kubernetes on the Audits API. Takes 9 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the activity.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the activity.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Users is the list of users to use for filtering.

          '
        in: query
        name: user
        schema:
          description: 'Users is the list of users to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the list of clusters for filtering.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the list of clusters for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_kubeaudit.Audit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorAccessKubernetes
      operationId: get-audits-kubernetes
      summary: Get Kubernetes Audit Events
      x-description-source: desc/audits/kubernetes_get.md
  /api/v34.03/audits/kubernetes/download:
    get:
      description: 'Download Kubernetes Audit Events. GET /api/v34.03/audits/kubernetes/download on the Audits API. Takes 9 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the activity.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the activity.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Users is the list of users to use for filtering.

          '
        in: query
        name: user
        schema:
          description: 'Users is the list of users to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the list of clusters for filtering.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the list of clusters for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorAccessKubernetes
      operationId: get-audits-kubernetes-download
      summary: Download Kubernetes Audit Events
      x-description-source: desc/audits/kubernetes_download_get.md
  /api/v34.03/audits/mgmt:
    get:
      description: 'Get Management Audit Events. GET /api/v34.03/audits/mgmt on the Audits API. Takes 8 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Types is the audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Usernames is the username filter.

          '
        in: query
        name: username
        schema:
          description: 'Usernames is the username filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.MgmtAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: systemLogs
      operationId: get-audits-mgmt
      summary: Get Management Audit Events
      x-description-source: desc/audits/mgmt_get.md
  /api/v34.03/audits/mgmt/download:
    get:
      description: 'Download Management Audit Events. GET /api/v34.03/audits/mgmt/download on the Audits API. Takes 8 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Types is the audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Usernames is the username filter.

          '
        in: query
        name: username
        schema:
          description: 'Usernames is the username filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: systemLogs
      operationId: get-audits-mgmt-download
      summary: Download Management Audit Events
      x-description-source: desc/audits/mgmt_download_get.md
  /api/v34.03/audits/mgmt/filters:
    get:
      description: 'Get Management Audit Event Filters. GET /api/v34.03/audits/mgmt/filters on the Audits API. Takes 8 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Types is the audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Usernames is the username filter.

          '
        in: query
        name: username
        schema:
          description: 'Usernames is the username filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/types.MgmtAuditFilters'
          description: MgmtAuditFilters are filters for management audit queries
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: systemLogs
      operationId: get-audits-mgmt-filters
      summary: Get Management Audit Event Filters
      x-description-source: desc/audits/mgmt_filters_get.md
  /api/v34.03/audits/runtime/app-embedded:
    get:
      description: 'Get Runtime App-embedded Audit Events. GET /api/v34.03/audits/runtime/app-embedded on the Audits API. Takes 33 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.RuntimeAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeServerless
      operationId: get-audits-runtime-app-embedded
      summary: Get Runtime App-embedded Audit Events
      x-description-source: desc/audits/runtime_app_embedded_get.md
  /api/v34.03/audits/runtime/app-embedded/download:
    get:
      description: 'Download Runtime App-embedded Audit Events. GET /api/v34.03/audits/runtime/app-embedded/download on the Audits API. Takes 33 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeServerless
      operationId: get-audits-runtime-app-embedded-download
      summary: Download Runtime App-embedded Audit Events
      x-description-source: desc/audits/runtime_app_embedded_download_get.md
  /api/v34.03/audits/runtime/container:
    get:
      description: 'Get Runtime Container Audit Events. GET /api/v34.03/audits/runtime/container on the Audits API. Takes 33 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.RuntimeAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeContainers
      operationId: get-audits-runtime-container
      summary: Get Runtime Container Audit Events
      x-description-source: desc/audits/runtime_container_get.md
  /api/v34.03/audits/runtime/container/download:
    get:
      description: 'Download Runtime Container Audit Events. GET /api/v34.03/audits/runtime/container/download on the Audits API. Takes 33 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeContainers
      operationId: get-audits-runtime-container-download
      summary: Download Runtime Container Audit Events
      x-description-source: desc/audits/runtime_container_download_get.md
  /api/v34.03/audits/runtime/container/timeslice:
    get:
      description: 'Get Runtime Container Audit Events for a Timeframe. GET /api/v34.03/audits/runtime/container/timeslice on the Audits API. Takes 34 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Buckets is the number of buckets to return.

          '
        in: query
        name: buckets
        schema:
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.AuditTimeslice'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeContainers
      operationId: get-audits-runtime-container-timeslice
      summary: Get Runtime Container Audit Events for a Timeframe
      x-description-source: desc/audits/runtime_container_timeslice_get.md
  /api/v34.03/audits/runtime/file-integrity:
    get:
      description: 'Get Runtime File Integrity Audit Events. GET /api/v34.03/audits/runtime/file-integrity on the Audits API. Takes 11 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs is the list of IDs to use for filtering.

          '
        in: query
        name: id
        schema:
          description: 'IDs is the list of IDs to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the event.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the event.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Hosts is the list of hosts to use for filtering.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the list of hosts to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the list of paths to use for filtering.

          '
        in: query
        name: path
        schema:
          description: 'Paths is the list of paths to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventTypes is the list of file intergrity events to use for filtering.

          '
        in: query
        name: eventType
        schema:
          description: 'EventTypes is the list of file intergrity events to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.FileIntegrityEvent'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeHosts
      operationId: get-audits-runtime-file-integrity
      summary: Get Runtime File Integrity Audit Events
      x-description-source: desc/audits/runtime_file-integrity_get.md
  /api/v34.03/audits/runtime/file-integrity/download:
    get:
      description: 'Download Runtime File Integrity Audit Events. GET /api/v34.03/audits/runtime/file-integrity/download on the Audits API. Takes 11 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs is the list of IDs to use for filtering.

          '
        in: query
        name: id
        schema:
          description: 'IDs is the list of IDs to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the event.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the event.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Hosts is the list of hosts to use for filtering.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the list of hosts to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the list of paths to use for filtering.

          '
        in: query
        name: path
        schema:
          description: 'Paths is the list of paths to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventTypes is the list of file intergrity events to use for filtering.

          '
        in: query
        name: eventType
        schema:
          description: 'EventTypes is the list of file intergrity events to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeHosts
      operationId: get-audits-runtime-file-integrity-download
      summary: Download Runtime File Integrity Audit Events
      x-description-source: desc/audits/runtime_file-integrity_download_get.md
  /api/v34.03/audits/runtime/host:
    get:
      description: 'Get Runtime Host Audit Events. GET /api/v34.03/audits/runtime/host on the Audits API. Takes 33 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.RuntimeAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeHosts
      operationId: get-audits-runtime-host
      summary: Get Runtime Host Audit Events
      x-description-source: desc/audits/runtime_host_get.md
  /api/v34.03/audits/runtime/host/download:
    get:
      description: 'Download Runtime Host Audit Events. GET /api/v34.03/audits/runtime/host/download on the Audits API. Takes 33 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeHosts
      operationId: get-audits-runtime-host-download
      summary: Download Runtime Host Audit Events
      x-description-source: desc/audits/runtime_host_download_get.md
  /api/v34.03/audits/runtime/host/timeslice:
    get:
      description: 'Get Runtime Host Audit Events for a Timeframe. GET /api/v34.03/audits/runtime/host/timeslice on the Audits API. Takes 34 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Buckets is the number of buckets to return.

          '
        in: query
        name: buckets
        schema:
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.AuditTimeslice'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeHosts
      operationId: get-audits-runtime-host-timeslice
      summary: Get Runtime Host Audit Events for a Timeframe
      x-description-source: desc/audits/runtime_host_timeslice_get.md
  /api/v34.03/audits/runtime/log-inspection:
    get:
      description: 'Get Runtime Log Inspection Audit Events. GET /api/v34.03/audits/runtime/log-inspection on the Audits API. Takes 10 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs is the list of IDs to use for filtering.

          '
        in: query
        name: id
        schema:
          description: 'IDs is the list of IDs to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the event.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the event.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Hosts is the list of hosts to use for filtering.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the list of hosts to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Logfiles is the list of log files to use for filtering.

          '
        in: query
        name: logfile
        schema:
          description: 'Logfiles is the list of log files to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.LogInspectionEvent'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeHosts
      operationId: get-audits-runtime-log-inspection
      summary: Get Runtime Log Inspection Audit Events
      x-description-source: desc/audits/runtime_log-inspection_get.md
  /api/v34.03/audits/runtime/log-inspection/download:
    get:
      description: 'Download Runtime Log Inspection Audit Events. GET /api/v34.03/audits/runtime/log-inspection/download on the Audits API. Takes 10 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs is the list of IDs to use for filtering.

          '
        in: query
        name: id
        schema:
          description: 'IDs is the list of IDs to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the event.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the event.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Hosts is the list of hosts to use for filtering.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the list of hosts to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Logfiles is the list of log files to use for filtering.

          '
        in: query
        name: logfile
        schema:
          description: 'Logfiles is the list of log files to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeHosts
      operationId: get-audits-runtime-log-inspection-download
      summary: Download Runtime Log Inspection Audit Events
      x-description-source: desc/audits/runtime_log-inspection_download_get.md
  /api/v34.03/audits/runtime/serverless:
    get:
      description: 'Get Runtime Serverless Audit Events. GET /api/v34.03/audits/runtime/serverless on the Audits API. Takes 18 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'ProfileIDs are the profile ids to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile ids to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is an optional exact time constraint for the audit.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is a filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is a filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request id.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request id.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.RuntimeAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeServerless
      operationId: get-audits-runtime-serverless
      summary: Get Runtime Serverless Audit Events
      x-description-source: desc/audits/runtime_serverless_get.md
  /api/v34.03/audits/runtime/serverless/download:
    get:
      description: 'Download Serverless Audit Events. GET /api/v34.03/audits/runtime/serverless/download on the Audits API. Takes 33 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeServerless
      operationId: get-audits-runtime-serverless-download
      summary: Download Serverless Audit Events
      x-description-source: desc/audits/runtime_serverless_download_get.md
  /api/v34.03/audits/runtime/serverless/timeslice:
    get:
      description: 'Get Runtime Serverless Audit Events for a Timeframe. GET /api/v34.03/audits/runtime/serverless/timeslice on the Audits API. Takes 34 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Buckets is the number of buckets to return.

          '
        in: query
        name: buckets
        schema:
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.AuditTimeslice'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeServerless
      operationId: get-audits-runtime-serverless-timeslice
      summary: Get Runtime Serverless Audit Events for a Timeframe
      x-description-source: desc/audits/runtime_serverless_timeslice_get.md
  /api/v34.03/audits/trust:
    get:
      description: 'Get Trust Audit Events. GET /api/v34.03/audits/trust on the Audits API. Takes 9 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'RuleNames is used to filter by rulename.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rulename.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'IDs is used to filter by registry/repo.

          '
        in: query
        name: _id
        schema:
          description: 'IDs is used to filter by registry/repo.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.TrustAudits'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorImages
      operationId: get-audits-trust
      summary: Get Trust Audit Events
      x-description-source: desc/audits/trust_get.md
  /api/v34.03/audits/trust/download:
    get:
      description: 'Download Trust Audit Events. GET /api/v34.03/audits/trust/download on the Audits API. Takes 9 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'RuleNames is used to filter by rulename.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rulename.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'IDs is used to filter by registry/repo.

          '
        in: query
        name: _id
        schema:
          description: 'IDs is used to filter by registry/repo.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorImages
      operationId: get-audits-trust-download
      summary: Download Trust Audit Events
      x-description-source: desc/audits/trust_download_get.md
  /api/v34.04/audits/access:
    get:
      description: 'Get Docker Access Audit Events. GET /api/v34.04/audits/access on the Audits API. Takes 13 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Type is the audit type.

          '
        in: query
        name: type
        schema:
          type: string
      - description: 'RuleNames are the rules names to filter by.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames are the rules names to filter by.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'APIs are apis to filter by.

          '
        in: query
        name: api
        schema:
          description: 'APIs are apis to filter by.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts are hosts to filter by.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts are hosts to filter by.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users are users to filter by.

          '
        in: query
        name: user
        schema:
          description: 'Users are users to filter by.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Allow indicated whether allowed requests should be shown.

          '
        in: query
        name: allow
        schema:
          type: string
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.Audit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorAccessDocker
      operationId: get-audits-access
      summary: Get Docker Access Audit Events
      x-description-source: desc/audits/access_get.md
  /api/v34.04/audits/access/download:
    get:
      description: 'Download Docker Access Audit Events. GET /api/v34.04/audits/access/download on the Audits API. Takes 13 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Type is the audit type.

          '
        in: query
        name: type
        schema:
          type: string
      - description: 'RuleNames are the rules names to filter by.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames are the rules names to filter by.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'APIs are apis to filter by.

          '
        in: query
        name: api
        schema:
          description: 'APIs are apis to filter by.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts are hosts to filter by.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts are hosts to filter by.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users are users to filter by.

          '
        in: query
        name: user
        schema:
          description: 'Users are users to filter by.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Allow indicated whether allowed requests should be shown.

          '
        in: query
        name: allow
        schema:
          type: string
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorAccessDocker
      operationId: get-audits-access-download
      summary: Download Docker Access Audit Events
      x-description-source: desc/audits/access_download_get.md
  /api/v34.04/audits/admission:
    get:
      description: 'Get Admission Audit Events. GET /api/v34.04/audits/admission on the Audits API. Takes 10 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the activity.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the activity.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Operations is the list of operations to use for filtering.

          '
        in: query
        name: operation
        schema:
          description: 'Operations is the list of operations to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_admission.Audit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorAccessKubernetes
      operationId: get-audits-admission
      summary: Get Admission Audit Events
      x-description-source: desc/audits/admission_get.md
  /api/v34.04/audits/admission/download:
    get:
      description: 'Download Admission Audit Events. GET /api/v34.04/audits/admission/download on the Audits API. Takes 10 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the activity.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the activity.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Operations is the list of operations to use for filtering.

          '
        in: query
        name: operation
        schema:
          description: 'Operations is the list of operations to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorAccessKubernetes
      operationId: get-audits-admission-download
      summary: Download Admission Audit Events
      x-description-source: desc/audits/admission_download_get.md
  /api/v34.04/audits/firewall/app/agentless:
    get:
      description: 'Get WAAS Agentless Audit Events. GET /api/v34.04/audits/firewall/app/agentless on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.AppFirewallAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-agentless
      summary: Get WAAS Agentless Audit Events
      x-description-source: desc/audits/waas_agentless_get.md
  /api/v34.04/audits/firewall/app/agentless/download:
    get:
      description: 'Download WAAS Agentless Audit Events. GET /api/v34.04/audits/firewall/app/agentless/download on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-agentless-download
      summary: Download WAAS Agentless Audit Events
      x-description-source: desc/audits/waas_agentless_download_get.md
  /api/v34.04/audits/firewall/app/agentless/timeslice:
    get:
      description: 'Get WAAS Agentless Audit Events for a Timeframe. GET /api/v34.04/audits/firewall/app/agentless/timeslice on the Audits API. Takes 39 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Buckets is the number of buckets to return.

          '
        in: query
        name: buckets
        schema:
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.AuditTimeslice'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-agentless-timeslice
      summary: Get WAAS Agentless Audit Events for a Timeframe
      x-description-source: desc/audits/waas_agentless_timeslice_get.md
  /api/v34.04/audits/firewall/app/app-embedded:
    get:
      description: 'Get WAAS App-embedded Audit Events. GET /api/v34.04/audits/firewall/app/app-embedded on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.AppFirewallAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-app-embedded
      summary: Get WAAS App-embedded Audit Events
      x-description-source: desc/audits/waas_app_embedded_get.md
  /api/v34.04/audits/firewall/app/app-embedded/download:
    get:
      description: 'Download WAAS App-embedded Audit Events. GET /api/v34.04/audits/firewall/app/app-embedded/download on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-app-embedded-download
      summary: Download WAAS App-embedded Audit Events
      x-description-source: desc/audits/waas_app_embedded_download_get.md
  /api/v34.04/audits/firewall/app/app-embedded/timeslice:
    get:
      description: 'Get WAAS App-embedded Audit Events for a Timeframe. GET /api/v34.04/audits/firewall/app/app-embedded/timeslice on the Audits API. Takes 39 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Buckets is the number of buckets to return.

          '
        in: query
        name: buckets
        schema:
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.AuditTimeslice'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-app-embedded-timeslice
      summary: Get WAAS App-embedded Audit Events for a Timeframe
      x-description-source: desc/audits/waas_app_embedded_timeslice_get.md
  /api/v34.04/audits/firewall/app/container:
    get:
      description: 'Get WAAS Container Audit Events. GET /api/v34.04/audits/firewall/app/container on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.AppFirewallAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-container
      summary: Get WAAS Container Audit Events
      x-description-source: desc/audits/waas_container_get.md
  /api/v34.04/audits/firewall/app/container/download:
    get:
      description: 'Download WAAS Container Audit Events. GET /api/v34.04/audits/firewall/app/container/download on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-container-download
      summary: Download WAAS Container Audit Events
      x-description-source: desc/audits/waas_container_download_get.md
  /api/v34.04/audits/firewall/app/container/timeslice:
    get:
      description: 'Get WAAS Container Audit Timeslice. GET /api/v34.04/audits/firewall/app/container/timeslice on the Audits API. Takes 39 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Buckets is the number of buckets to return.

          '
        in: query
        name: buckets
        schema:
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.AuditTimeslice'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-container-timeslice
      summary: Get WAAS Container Audit Timeslice
      x-description-source: desc/audits/waas_container_timeslice_get.md
  /api/v34.04/audits/firewall/app/host:
    get:
      description: 'Get WAAS Host Audit Events. GET /api/v34.04/audits/firewall/app/host on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.AppFirewallAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-host
      summary: Get WAAS Host Audit Events
      x-description-source: desc/audits/waas_host_get.md
  /api/v34.04/audits/firewall/app/host/download:
    get:
      description: 'Download WAAS Host Audit Events. GET /api/v34.04/audits/firewall/app/host/download on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-host-download
      summary: Download WAAS Host Audit Events
      x-description-source: desc/audits/waas_host_download_get.md
  /api/v34.04/audits/firewall/app/host/timeslice:
    get:
      description: 'Get WAAS Host Audit Timeslice. GET /api/v34.04/audits/firewall/app/host/timeslice on the Audits API. Takes 39 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Buckets is the number of buckets to return.

          '
        in: query
        name: buckets
        schema:
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.AuditTimeslice'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-host-timeslice
      summary: Get WAAS Host Audit Timeslice
      x-description-source: desc/audits/waas_host_timeslice_get.md
  /api/v34.04/audits/firewall/app/serverless:
    get:
      description: 'Get WAAS Serverless Audit Events. GET /api/v34.04/audits/firewall/app/serverless on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.AppFirewallAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-serverless
      summary: Get WAAS Serverless Audit Events
      x-description-source: desc/audits/waas_serverless_get.md
  /api/v34.04/audits/firewall/app/serverless/download:
    get:
      description: 'Download WAAS Serverless Audit Events. GET /api/v34.04/audits/firewall/app/serverless/download on the Audits API. Takes 38 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-serverless-download
      summary: Download WAAS Serverless Audit Events
      x-description-source: desc/audits/waas_serverless_download_get.md
  /api/v34.04/audits/firewall/app/serverless/timeslice:
    get:
      description: 'Get WAAS Serverless Audit Events for a Timeframe. GET /api/v34.04/audits/firewall/app/serverless/timeslice on the Audits API. Takes 39 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Images is the image names filter.

          '
        in: query
        name: imageName
        schema:
          description: 'Images is the image names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container names filter.

          '
        in: query
        name: containerName
        schema:
          description: 'Containers is the container names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hosts is the hostnames filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is the rule names filter.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is the rule names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is the firewall audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the firewall audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect.

          '
        in: query
        name: effect
        schema:
          type: string
      - description: 'RuleAppIDs is the rule app IDs filter.

          '
        in: query
        name: ruleAppID
        schema:
          description: 'RuleAppIDs is the rule app IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionName is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'FunctionName is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the list of namespaces to use for filtering.

          '
        in: query
        name: ns
        schema:
          description: 'Namespaces is the list of namespaces to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AppIDs is the app embedded appID filter.

          '
        in: query
        name: appID
        schema:
          description: 'AppIDs is the app embedded appID filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Subnets is the source IPs filter.

          '
        in: query
        name: subnet
        schema:
          description: 'Subnets is the source IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ConnectingIPs is the connecting IPs filter.

          '
        in: query
        name: connectingIPs
        schema:
          description: 'ConnectingIPs is the connecting IPs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Countries is the source IP country filter.

          '
        in: query
        name: country
        schema:
          description: 'Countries is the source IP country filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'UserAgents is the user agent header filter.

          '
        in: query
        name: userAgentHeader
        schema:
          description: 'UserAgents is the user agent header filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'URLs is the URL filter.

          '
        in: query
        name: url
        schema:
          description: 'URLs is the URL filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHosts is the request host filter.

          '
        in: query
        name: requestHost
        schema:
          description: 'RequestHosts is the request host filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the URL path filter.

          '
        in: query
        name: urlPath
        schema:
          description: 'Paths is the URL path filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Queries is the URL query filter.

          '
        in: query
        name: urlQuery
        schema:
          description: 'Queries is the URL query filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Methods is the request method filter.

          '
        in: query
        name: method
        schema:
          description: 'Methods is the request method filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestHeaderNames is the request header names filter.

          '
        in: query
        name: requestHeaderNames
        schema:
          description: 'RequestHeaderNames is the request header names filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the OS filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the OS filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Messages is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Messages is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Cluster is the audit cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Cluster is the audit cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'Protections is the firewall audit protection type filter.

          '
        in: query
        name: protection
        schema:
          description: 'Protections is the firewall audit protection type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventID is the event IDs filter.

          '
        in: query
        name: eventID
        schema:
          description: 'EventID is the event IDs filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPTop10 is the OWASP top 10 filter.

          '
        in: query
        name: owaspTop10
        schema:
          description: 'OWASPTop10 is the OWASP top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OWASPAPITop10 is the OWASP API top 10 filter.

          '
        in: query
        name: owaspAPITop10
        schema:
          description: 'OWASPAPITop10 is the OWASP API top 10 filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AdditionalHash is used to filter by the additional hash value.

          '
        in: query
        name: additionalHash
        schema:
          description: 'AdditionalHash is used to filter by the additional hash value.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ModelPath is used to filter by the API model path.

          '
        in: query
        name: modelPath
        schema:
          description: 'ModelPath is used to filter by the API model path.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Buckets is the number of buckets to return.

          '
        in: query
        name: buckets
        schema:
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.AuditTimeslice'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorWAAS
      operationId: get-audits-firewall-app-serverless-timeslice
      summary: Get WAAS Serverless Audit Events for a Timeframe
      x-description-source: desc/audits/waas_serverless_timeslice_get.md
  /api/v34.04/audits/firewall/network/container:
    get:
      description: 'Get CNNS Container Audit Events. GET /api/v34.04/audits/firewall/network/container on the Audits API. Takes 9 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audits.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audits.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'SrcImages are the source images filter.

          '
        in: query
        name: srcImageName
        schema:
          description: 'SrcImages are the source images filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'DstImages are the destination images filter.

          '
        in: query
        name: dstImageName
        schema:
          description: 'DstImages are the destination images filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Block is the block/audit filter.

          '
        in: query
        name: block
        schema:
          type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.ContainerNetworkFirewallProfileAudits'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorCNNF
      operationId: get-audits-firewall-network-container
      summary: Get CNNS Container Audit Events
      x-description-source: desc/audits/firewall_network_container_get.md
  /api/v34.04/audits/firewall/network/container/download:
    get:
      description: 'Download CNNS Container Audit Events. GET /api/v34.04/audits/firewall/network/container/download on the Audits API. Takes 9 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audits.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audits.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'SrcImages are the source images filter.

          '
        in: query
        name: srcImageName
        schema:
          description: 'SrcImages are the source images filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'DstImages are the destination images filter.

          '
        in: query
        name: dstImageName
        schema:
          description: 'DstImages are the destination images filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Block is the block/audit filter.

          '
        in: query
        name: block
        schema:
          type: string
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorCNNF
      operationId: get-audits-firewall-network-container-download
      summary: Download CNNS Container Audit Events
      x-description-source: desc/audits/firewall_network_container_download_get.md
  /api/v34.04/audits/firewall/network/host:
    get:
      description: 'Get CNNS Host Audit Events. GET /api/v34.04/audits/firewall/network/host on the Audits API. Takes 8 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audits.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audits.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'SrcHostname are the source hostnames filter.

          '
        in: query
        name: srcHostnames
        schema:
          description: 'SrcHostname are the source hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'DstHostname are the destination hostnames filter.

          '
        in: query
        name: dstHostnames
        schema:
          description: 'DstHostname are the destination hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.HostNetworkFirewallProfileAudits'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorCNNF
      operationId: get-audits-firewall-network-host
      summary: Get CNNS Host Audit Events
      x-description-source: desc/audits/firewall_network_host_get.md
  /api/v34.04/audits/firewall/network/host/download:
    get:
      description: 'Download CNNS Host Audit Events. GET /api/v34.04/audits/firewall/network/host/download on the Audits API. Takes 8 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audits.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audits.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'SrcHostname are the source hostnames filter.

          '
        in: query
        name: srcHostnames
        schema:
          description: 'SrcHostname are the source hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'DstHostname are the destination hostnames filter.

          '
        in: query
        name: dstHostnames
        schema:
          description: 'DstHostname are the destination hostnames filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorCNNF
      operationId: get-audits-firewall-network-host-download
      summary: Download CNNS Host Audit Events
      x-description-source: desc/audits/firewall_network_host_download_get.md
  /api/v34.04/audits/incidents:
    get:
      description: 'Get Incident Audit Events. GET /api/v34.04/audits/incidents on the Audits API. Takes 17 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'Filters results from a start datetime.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'Filters results from an end datetime.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Filters results by hostname where the incident occurred.

          '
        in: query
        name: hostname
        schema:
          description: 'Filters results by hostname where the incident occurred.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by incident category.

          '
        in: query
        name: category
        schema:
          description: 'Filters results by incident category.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by incident type.

          '
        in: query
        name: type
        schema:
          description: 'Filters results by incident type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by runtime profile ID.

          '
        in: query
        name: profileID
        schema:
          description: 'Filters results by runtime profile ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by incidents that have been acknowledged.

          '
        in: query
        name: acknowledged
        schema:
          type: string
      - description: 'Filters results by region (for functions)

          Filters results by cluster name.

          '
        in: query
        name: cluster
        schema:
          description: 'Filters results by region (for functions)

            Filters results by cluster name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by ID.

          '
        in: query
        name: id
        schema:
          description: 'Filters results by ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by app IDs.

          '
        in: query
        name: appID
        schema:
          description: 'Filters results by app IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by container IDs.

          '
        in: query
        name: containerID
        schema:
          description: 'Filters results by container IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by function IDs.

          '
        in: query
        name: functionID
        schema:
          description: 'Filters results by function IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by custom rule names.

          '
        in: query
        name: customRuleName
        schema:
          description: 'Filters results by custom rule names.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.Incident'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeIncidents
      operationId: get-audits-incidents
      summary: Get Incident Audit Events
      x-description-source: desc/audits/incidents_get.md
  /api/v34.04/audits/incidents/acknowledge/{id}:
    patch:
      description: 'Archive an Incident Audit Event. PATCH /api/v34.04/audits/incidents/acknowledge/{id} on the Audits API. Takes 1 path parameter, an optional request body. Documented responses: 200.'
      parameters:
      - in: path
        name: id
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/shared.Incident'
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeIncidents
      operationId: patch-audits-incidents-acknowledge-id
      summary: Archive an Incident Audit Event
      x-description-source: desc/audits/incidents_archive_patch.md
  /api/v34.04/audits/incidents/download:
    get:
      description: 'Download Incident Audit Events. GET /api/v34.04/audits/incidents/download on the Audits API. Takes 17 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'Filters results from a start datetime.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'Filters results from an end datetime.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Filters results by hostname where the incident occurred.

          '
        in: query
        name: hostname
        schema:
          description: 'Filters results by hostname where the incident occurred.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by incident category.

          '
        in: query
        name: category
        schema:
          description: 'Filters results by incident category.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by incident type.

          '
        in: query
        name: type
        schema:
          description: 'Filters results by incident type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by runtime profile ID.

          '
        in: query
        name: profileID
        schema:
          description: 'Filters results by runtime profile ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by incidents that have been acknowledged.

          '
        in: query
        name: acknowledged
        schema:
          type: string
      - description: 'Filters results by region (for functions)

          Filters results by cluster name.

          '
        in: query
        name: cluster
        schema:
          description: 'Filters results by region (for functions)

            Filters results by cluster name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by ID.

          '
        in: query
        name: id
        schema:
          description: 'Filters results by ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by app IDs.

          '
        in: query
        name: appID
        schema:
          description: 'Filters results by app IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by container IDs.

          '
        in: query
        name: containerID
        schema:
          description: 'Filters results by container IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by function IDs.

          '
        in: query
        name: functionID
        schema:
          description: 'Filters results by function IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Filters results by custom rule names.

          '
        in: query
        name: customRuleName
        schema:
          description: 'Filters results by custom rule names.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeIncidents
      operationId: get-audits-incidents-download
      summary: Download Incident Audit Events
      x-description-source: desc/audits/incidents_download_get.md
  /api/v34.04/audits/kubernetes:
    get:
      description: 'Get Kubernetes Audit Events. GET /api/v34.04/audits/kubernetes on the Audits API. Takes 9 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the activity.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the activity.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Users is the list of users to use for filtering.

          '
        in: query
        name: user
        schema:
          description: 'Users is the list of users to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the list of clusters for filtering.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the list of clusters for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_kubeaudit.Audit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorAccessKubernetes
      operationId: get-audits-kubernetes
      summary: Get Kubernetes Audit Events
      x-description-source: desc/audits/kubernetes_get.md
  /api/v34.04/audits/kubernetes/download:
    get:
      description: 'Download Kubernetes Audit Events. GET /api/v34.04/audits/kubernetes/download on the Audits API. Takes 9 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the activity.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the activity.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Users is the list of users to use for filtering.

          '
        in: query
        name: user
        schema:
          description: 'Users is the list of users to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the list of clusters for filtering.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the list of clusters for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorAccessKubernetes
      operationId: get-audits-kubernetes-download
      summary: Download Kubernetes Audit Events
      x-description-source: desc/audits/kubernetes_download_get.md
  /api/v34.04/audits/mgmt:
    get:
      description: 'Get Management Audit Events. GET /api/v34.04/audits/mgmt on the Audits API. Takes 8 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Types is the audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Usernames is the username filter.

          '
        in: query
        name: username
        schema:
          description: 'Usernames is the username filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.MgmtAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: systemLogs
      operationId: get-audits-mgmt
      summary: Get Management Audit Events
      x-description-source: desc/audits/mgmt_get.md
  /api/v34.04/audits/mgmt/download:
    get:
      description: 'Download Management Audit Events. GET /api/v34.04/audits/mgmt/download on the Audits API. Takes 8 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Types is the audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Usernames is the username filter.

          '
        in: query
        name: username
        schema:
          description: 'Usernames is the username filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: systemLogs
      operationId: get-audits-mgmt-download
      summary: Download Management Audit Events
      x-description-source: desc/audits/mgmt_download_get.md
  /api/v34.04/audits/mgmt/filters:
    get:
      description: 'Get Management Audit Event Filters. GET /api/v34.04/audits/mgmt/filters on the Audits API. Takes 8 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Types is the audit type filter.

          '
        in: query
        name: type
        schema:
          description: 'Types is the audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Usernames is the username filter.

          '
        in: query
        name: username
        schema:
          description: 'Usernames is the username filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/types.MgmtAuditFilters'
          description: MgmtAuditFilters are filters for management audit queries
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: systemLogs
      operationId: get-audits-mgmt-filters
      summary: Get Management Audit Event Filters
      x-description-source: desc/audits/mgmt_filters_get.md
  /api/v34.04/audits/runtime/app-embedded:
    get:
      description: 'Get Runtime App-embedded Audit Events. GET /api/v34.04/audits/runtime/app-embedded on the Audits API. Takes 33 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.RuntimeAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeServerless
      operationId: get-audits-runtime-app-embedded
      summary: Get Runtime App-embedded Audit Events
      x-description-source: desc/audits/runtime_app_embedded_get.md
  /api/v34.04/audits/runtime/app-embedded/download:
    get:
      description: 'Download Runtime App-embedded Audit Events. GET /api/v34.04/audits/runtime/app-embedded/download on the Audits API. Takes 33 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeServerless
      operationId: get-audits-runtime-app-embedded-download
      summary: Download Runtime App-embedded Audit Events
      x-description-source: desc/audits/runtime_app_embedded_download_get.md
  /api/v34.04/audits/runtime/container:
    get:
      description: 'Get Runtime Container Audit Events. GET /api/v34.04/audits/runtime/container on the Audits API. Takes 33 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.RuntimeAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeContainers
      operationId: get-audits-runtime-container
      summary: Get Runtime Container Audit Events
      x-description-source: desc/audits/runtime_container_get.md
  /api/v34.04/audits/runtime/container/download:
    get:
      description: 'Download Runtime Container Audit Events. GET /api/v34.04/audits/runtime/container/download on the Audits API. Takes 33 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeContainers
      operationId: get-audits-runtime-container-download
      summary: Download Runtime Container Audit Events
      x-description-source: desc/audits/runtime_container_download_get.md
  /api/v34.04/audits/runtime/container/timeslice:
    get:
      description: 'Get Runtime Container Audit Events for a Timeframe. GET /api/v34.04/audits/runtime/container/timeslice on the Audits API. Takes 34 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Buckets is the number of buckets to return.

          '
        in: query
        name: buckets
        schema:
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.AuditTimeslice'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeContainers
      operationId: get-audits-runtime-container-timeslice
      summary: Get Runtime Container Audit Events for a Timeframe
      x-description-source: desc/audits/runtime_container_timeslice_get.md
  /api/v34.04/audits/runtime/file-integrity:
    get:
      description: 'Get Runtime File Integrity Audit Events. GET /api/v34.04/audits/runtime/file-integrity on the Audits API. Takes 11 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs is the list of IDs to use for filtering.

          '
        in: query
        name: id
        schema:
          description: 'IDs is the list of IDs to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the event.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the event.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Hosts is the list of hosts to use for filtering.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the list of hosts to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the list of paths to use for filtering.

          '
        in: query
        name: path
        schema:
          description: 'Paths is the list of paths to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventTypes is the list of file intergrity events to use for filtering.

          '
        in: query
        name: eventType
        schema:
          description: 'EventTypes is the list of file intergrity events to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.FileIntegrityEvent'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeHosts
      operationId: get-audits-runtime-file-integrity
      summary: Get Runtime File Integrity Audit Events
      x-description-source: desc/audits/runtime_file-integrity_get.md
  /api/v34.04/audits/runtime/file-integrity/download:
    get:
      description: 'Download Runtime File Integrity Audit Events. GET /api/v34.04/audits/runtime/file-integrity/download on the Audits API. Takes 11 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs is the list of IDs to use for filtering.

          '
        in: query
        name: id
        schema:
          description: 'IDs is the list of IDs to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the event.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the event.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Hosts is the list of hosts to use for filtering.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the list of hosts to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Paths is the list of paths to use for filtering.

          '
        in: query
        name: path
        schema:
          description: 'Paths is the list of paths to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'EventTypes is the list of file intergrity events to use for filtering.

          '
        in: query
        name: eventType
        schema:
          description: 'EventTypes is the list of file intergrity events to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeHosts
      operationId: get-audits-runtime-file-integrity-download
      summary: Download Runtime File Integrity Audit Events
      x-description-source: desc/audits/runtime_file-integrity_download_get.md
  /api/v34.04/audits/runtime/host:
    get:
      description: 'Get Runtime Host Audit Events. GET /api/v34.04/audits/runtime/host on the Audits API. Takes 33 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.RuntimeAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeHosts
      operationId: get-audits-runtime-host
      summary: Get Runtime Host Audit Events
      x-description-source: desc/audits/runtime_host_get.md
  /api/v34.04/audits/runtime/host/download:
    get:
      description: 'Download Runtime Host Audit Events. GET /api/v34.04/audits/runtime/host/download on the Audits API. Takes 33 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeHosts
      operationId: get-audits-runtime-host-download
      summary: Download Runtime Host Audit Events
      x-description-source: desc/audits/runtime_host_download_get.md
  /api/v34.04/audits/runtime/host/timeslice:
    get:
      description: 'Get Runtime Host Audit Events for a Timeframe. GET /api/v34.04/audits/runtime/host/timeslice on the Audits API. Takes 34 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Buckets is the number of buckets to return.

          '
        in: query
        name: buckets
        schema:
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.AuditTimeslice'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeHosts
      operationId: get-audits-runtime-host-timeslice
      summary: Get Runtime Host Audit Events for a Timeframe
      x-description-source: desc/audits/runtime_host_timeslice_get.md
  /api/v34.04/audits/runtime/log-inspection:
    get:
      description: 'Get Runtime Log Inspection Audit Events. GET /api/v34.04/audits/runtime/log-inspection on the Audits API. Takes 10 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs is the list of IDs to use for filtering.

          '
        in: query
        name: id
        schema:
          description: 'IDs is the list of IDs to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the event.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the event.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Hosts is the list of hosts to use for filtering.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the list of hosts to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Logfiles is the list of log files to use for filtering.

          '
        in: query
        name: logfile
        schema:
          description: 'Logfiles is the list of log files to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.LogInspectionEvent'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeHosts
      operationId: get-audits-runtime-log-inspection
      summary: Get Runtime Log Inspection Audit Events
      x-description-source: desc/audits/runtime_log-inspection_get.md
  /api/v34.04/audits/runtime/log-inspection/download:
    get:
      description: 'Download Runtime Log Inspection Audit Events. GET /api/v34.04/audits/runtime/log-inspection/download on the Audits API. Takes 10 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs is the list of IDs to use for filtering.

          '
        in: query
        name: id
        schema:
          description: 'IDs is the list of IDs to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the event.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the event.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Hosts is the list of hosts to use for filtering.

          '
        in: query
        name: hostname
        schema:
          description: 'Hosts is the list of hosts to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Logfiles is the list of log files to use for filtering.

          '
        in: query
        name: logfile
        schema:
          description: 'Logfiles is the list of log files to use for filtering.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeHosts
      operationId: get-audits-runtime-log-inspection-download
      summary: Download Runtime Log Inspection Audit Events
      x-description-source: desc/audits/runtime_log-inspection_download_get.md
  /api/v34.04/audits/runtime/serverless:
    get:
      description: 'Get Runtime Serverless Audit Events. GET /api/v34.04/audits/runtime/serverless on the Audits API. Takes 18 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'ProfileIDs are the profile ids to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile ids to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is an optional exact time constraint for the audit.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is a filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is a filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request id.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request id.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.RuntimeAudit'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeServerless
      operationId: get-audits-runtime-serverless
      summary: Get Runtime Serverless Audit Events
      x-description-source: desc/audits/runtime_serverless_get.md
  /api/v34.04/audits/runtime/serverless/download:
    get:
      description: 'Download Serverless Audit Events. GET /api/v34.04/audits/runtime/serverless/download on the Audits API. Takes 33 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeServerless
      operationId: get-audits-runtime-serverless-download
      summary: Download Serverless Audit Events
      x-description-source: desc/audits/runtime_serverless_download_get.md
  /api/v34.04/audits/runtime/serverless/timeslice:
    get:
      description: 'Get Runtime Serverless Audit Events for a Timeframe. GET /api/v34.04/audits/runtime/serverless/timeslice on the Audits API. Takes 34 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'IDs are the audit IDs to filter.

          '
        in: query
        name: id
        schema:
          description: 'IDs are the audit IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProfileIDs are the profile IDs to filter.

          '
        in: query
        name: profileID
        schema:
          description: 'ProfileIDs are the profile IDs to filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'Time is used to filter by audit time.

          '
        in: query
        name: time
        schema:
          format: date-time
          type: string
      - description: 'ImageNames is the image name filter.

          '
        in: query
        name: imageName
        schema:
          description: 'ImageNames is the image name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Containers is the container name filter.

          '
        in: query
        name: container
        schema:
          description: 'Containers is the container name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ContainerID is used to filter by container ID.

          '
        in: query
        name: containerID
        schema:
          description: 'ContainerID is used to filter by container ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RuleNames is used to filter by rule name.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rule name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Types is used to filter by runtime audit type.

          '
        in: query
        name: type
        schema:
          description: 'Types is used to filter by runtime audit type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (e.g., block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Users is used to filter by host users.

          '
        in: query
        name: user
        schema:
          description: 'Users is used to filter by host users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'OS is the image OS distro filter.

          '
        in: query
        name: os
        schema:
          description: 'OS is the image OS distro filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Namespaces is the namespaces filter.

          '
        in: query
        name: namespace
        schema:
          description: 'Namespaces is the namespaces filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Fields is used to fetch specific runtime audit fields.

          '
        in: query
        name: fields
        schema:
          description: 'Fields is used to fetch specific runtime audit fields.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Clusters is the cluster filter.

          '
        in: query
        name: cluster
        schema:
          description: 'Clusters is the cluster filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTypes is used to filter by runtime audit attack type.

          '
        in: query
        name: attackType
        schema:
          description: 'AttackTypes is used to filter by runtime audit attack type.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Hostname is the hostname filter.

          '
        in: query
        name: hostname
        schema:
          description: 'Hostname is the hostname filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Message is the audit message text filter.

          '
        in: query
        name: msg
        schema:
          description: 'Message is the audit message text filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Interactive is the audit interactive filter.

          '
        in: query
        name: interactive
        schema:
          description: 'Interactive is the audit interactive filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Function is used to filter by function name.

          '
        in: query
        name: function
        schema:
          description: 'Function is used to filter by function name.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Runtime is used to filter by runtime.

          '
        in: query
        name: runtime
        schema:
          description: 'Runtime is used to filter by runtime.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AttackTechniques are the MITRE attack techniques.

          '
        in: query
        name: attackTechniques
        schema:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'App is the name constraint of the service that triggered the audit.

          '
        in: query
        name: app
        schema:
          description: 'App is the name constraint of the service that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ProcessPath is the path constraint of the process that triggered the audit.

          '
        in: query
        name: processPath
        schema:
          description: 'ProcessPath is the path constraint of the process that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'RequestID is used to filter by request ID.

          '
        in: query
        name: requestID
        schema:
          description: 'RequestID is used to filter by request ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'FunctionID is used to filter by function ID.

          '
        in: query
        name: functionID
        schema:
          description: 'FunctionID is used to filter by function ID.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Aggregate indicates whether the result audits should be aggregated according to the Select field.

          '
        in: query
        name: aggregate
        schema:
          type: boolean
      - description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

          '
        in: query
        name: appID
        schema:
          description: 'AppID is used to filter by embedded app or Fargate task that triggered the audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Buckets is the number of buckets to return.

          '
        in: query
        name: buckets
        schema:
          type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.AuditTimeslice'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorRuntimeServerless
      operationId: get-audits-runtime-serverless-timeslice
      summary: Get Runtime Serverless Audit Events for a Timeframe
      x-description-source: desc/audits/runtime_serverless_timeslice_get.md
  /api/v34.04/audits/trust:
    get:
      description: 'Get Trust Audit Events. GET /api/v34.04/audits/trust on the Audits API. Takes 9 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'RuleNames is used to filter by rulename.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rulename.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'IDs is used to filter by registry/repo.

          '
        in: query
        name: _id
        schema:
          description: 'IDs is used to filter by registry/repo.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.TrustAudits'
          description: ''
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorImages
      operationId: get-audits-trust
      summary: Get Trust Audit Events
      x-description-source: desc/audits/trust_get.md
  /api/v34.04/audits/trust/download:
    get:
      description: 'Download Trust Audit Events. GET /api/v34.04/audits/trust/download on the Audits API. Takes 9 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'From is an optional minimum time constraints for the audit.

          '
        in: query
        name: from
        schema:
          format: date-time
          type: string
      - description: 'To is an optional maximum time constraints for the audit.

          '
        in: query
        name: to
        schema:
          format: date-time
          type: string
      - description: 'RuleNames is used to filter by rulename.

          '
        in: query
        name: ruleName
        schema:
          description: 'RuleNames is used to filter by rulename.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Effect is used to filter by runtime audit effect (block/alert).

          '
        in: query
        name: effect
        schema:
          description: 'Effect is used to filter by runtime audit effect (block/alert).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'IDs is used to filter by registry/repo.

          '
        in: query
        name: _id
        schema:
          description: 'IDs is used to filter by registry/repo.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Audits
      x-prisma-cloud-target-env:
        permission: monitorImages
      operationId: get-audits-trust-download
      summary: Download Trust Audit Events
      x-description-source: desc/audits/trust_download_get.md
components:
  schemas:
    shared.ContainerNetworkFirewallSubtypeAudits:
      description: ContainerNetworkFirewallSubtypeAudits represents the container network firewall sub type audits per profile
      properties:
        audits:
          description: 'Audits are the container network firewall audits associated with the sub-type, limited to the determined capacity.

            '
          items:
            $ref: '#/components/schemas/cnnf.ContainerAudit'
          type: array
        count:
          description: 'Count is the total count of the sub-type audits.

            '
          type: integer
      type: object
    prisma.AssetType:
      description: 'AssetType is the integral value that we need to pass to PC in the UAI and Unified Alerts integrations to identify the asset type

        Mappings of the asset types agreed upon with PC can be found here - https://docs.google.com/spreadsheets/d/1M0Aj5U4vpFGEnpd0v_xK-CsxSH4lovE7p93hkzE4DTY

        Additional asset types can be found here - https://redlock.atlassian.net/browse/RLP-57240

        This value will be identical to resource api id in case of Unified Alerts'
      enum:
      - - '15'
        - '16'
        - '18'
        - '5109'
        - '39'
        - '45'
        - '65'
        - '5051'
        - '5070'
        - '7075'
        - '7077'
        - '10523'
        - '10524'
        - '10562'
        - '15000'
        - '20019'
        - '20028'
        - '20042'
        - '20051'
        - '20125'
        - '20126'
        - '20127'
        - '20155'
        - '25001'
        - '30012'
        - '30013'
        - '30014'
        - '30015'
        - '30016'
        - '30018'
        - '30020'
      type: integer
    kubeaudit.EventUserInfo:
      description: EventUserInfo holds the information about the user that authenticated to Kubernentes
      properties:
        groups:
          description: 'The names of groups this user is a part of (optional).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        uid:
          description: 'A unique value that identifies this user across time. If this user is

            deleted and another user by the same name is added, they will have

            different UIDs (optional).

            '
          type: string
        username:
          description: 'The name that uniquely identifies this user among all active users (optional).

            '
          type: string
      type: object
    mitre.Technique:
      description: Technique is the MITRE framework attack technique
      enum:
      - - exploitationForPrivilegeEscalation
        - exploitPublicFacingApplication
        - applicationExploitRCE
        - networkServiceScanning
        - endpointDenialOfService
        - exfiltrationGeneral
        - systemNetworkConfigurationDiscovery
        - unsecuredCredentials
        - credentialDumping
        - systemInformationDiscovery
        - systemNetworkConnectionDiscovery
        - systemUserDiscovery
        - accountDiscovery
        - cloudInstanceMetadataAPI
        - accessKubeletMainAPI
        - queryKubeletReadonlyAPI
        - accessKubernetesAPIServer
        - softwareDeploymentTools
        - ingressToolTransfer
        - lateralToolTransfer
        - commandAndControlGeneral
        - resourceHijacking
        - manInTheMiddle
        - nativeBinaryExecution
        - foreignBinaryExecution
        - createAccount
        - accountManipulation
        - abuseElevationControlMechanisms
        - supplyChainCompromise
        - obfuscatedFiles
        - hijackExecutionFlow
        - impairDefences
        - scheduledTaskJob
        - exploitationOfRemoteServices
        - eventTriggeredExecution
        - accountAccessRemoval
        - privilegedContainer
        - writableVolumes
        - execIntoContainer
        - softwareDiscovery
        - createContainer
        - kubernetesSecrets
        - fileAndDirectoryDiscovery
        - masquerading
        - webShell
        - compileAfterDelivery
      type: string
    shared.ContainerNetworkFirewallProfileAudits:
      description: ContainerNetworkFirewallProfileAudits represents the container network firewall profile audits
      properties:
        _id:
          description: 'ProfileID is the runtime profile ID.

            '
          type: string
        audits:
          additionalProperties:
            $ref: '#/components/schemas/shared.ContainerNetworkFirewallSubtypeAudits'
          description: 'Audits is a map from the audit sub-type to the audit events list.

            '
          type: object
        cluster:
          description: 'Cluster is the cluster from which the audit originated.

            '
          type: string
        collections:
          description: 'Collections are collections to which this audit applies.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        imageName:
          description: 'ImageName is the container image name.

            '
          type: string
        label:
          description: 'Label represents the container deployment label.

            '
          type: string
        os:
          description: 'OS is the operating system distribution.

            '
          type: string
        resource:
          $ref: '#/components/schemas/common.RuntimeResource'
        time:
          description: 'Time is the UTC time of the last audit event.

            '
          format: date-time
          type: string
        total:
          description: 'Total is the total count of audits per runtime profile.

            '
          type: integer
      type: object
    -_shared.AppFirewallAudit:
      items:
        $ref: '#/components/schemas/shared.AppFirewallAudit'
      type: array
    waas.Protection:
      description: Protection is the type of protection
      enum:
      - - firewall
        - dos
        - bot
        - custom
        - accessControl
      type: string
    admission.Audit:
      description: Audit represents an admission audit
      properties:
        accountID:
          description: 'AccountID is the cloud account ID.

            '
          type: string
        attackTechniques:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/mitre.Technique'
          type: array
        cluster:
          description: 'Cluster is the cluster where the audit took place.

            '
          type: string
        collections:
          description: 'Collections are collections to which this audit applies.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        effect:
          description: 'Effect is the rule effect which was applied to the review which led to this audit.

            '
          type: string
        kind:
          description: 'Kind is the type of object being manipulated. For example: Pod.

            '
          type: string
        message:
          description: 'Message is the rule user defined message which appears on audit.

            '
          type: string
        namespace:
          description: 'Namespace is the namespace associated with the request (if any).

            '
          type: string
        operation:
          description: 'Operation is the operation being performed.

            '
          type: string
        rawRequest:
          description: 'RawRequest is the original review request that caused this audit.

            '
          type: string
        resource:
          description: 'Resource is the name of the resource being requested.  This is not the kind.  For example: pods.

            '
          type: string
        ruleName:
          description: 'RuleName is the name of the rule which issued this audit.

            '
          type: string
        time:
          description: 'Time is the time at which the audit was generated.

            '
          format: date-time
          type: string
        userGroups:
          description: 'UserGroups is the names of groups this user is a part of.

            '
          type: string
        userUid:
          description: 'UserUID is a unique value that identifies this user across time. If this user is

            deleted and another user by the same name is added, they will have

            different UIDs.

            '
          type: string
        username:
          description: 'Username is the name that uniquely identifies this user among all active users.

            '
          type: string
      type: object
    shared.FileMetadata:
      description: FileMetadata represents the metadata of a single file/directory
      properties:
        gid:
          description: 'GID is the ID of the group that owns the file/directory.

            '
          type: integer
        permissions:
          description: 'Permissions are the file/directory permission bits.

            '
          type: integer
        uid:
          description: 'UID is the ID of the user that owns the file/directory.

            '
          type: integer
      type: object
    kubeaudit.Audit:
      description: Audit represents a Kubernetes audit - this is the data that is stored for matched audits
      properties:
        accountID:
          description: 'AccountID is the account ID the Kubernetes audit belongs to.

            '
          type: string
        attackTechniques:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/mitre.Technique'
          type: array
        authorizationInfo:
          additionalProperties:
            $ref: '#/components/schemas/string'
          description: 'AuthorizationInfo holds the original event authorization info.

            '
          type: object
        cluster:
          description: 'Cluster is the cluster the Kubernetes audit belongs to.

            '
          type: string
        collections:
          description: 'Collections that apply to the Kubernetes audit.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        eventBlob:
          description: 'EventBlob is the original event that caused this audit.

            '
          type: string
        message:
          description: 'Message is the user defined message which appears on audit.

            '
          type: string
        provider:
          $ref: '#/components/schemas/common.CloudProvider'
        requestURI:
          description: 'RequestURI is the request URI as sent by the client to a server.

            '
          type: string
        resources:
          description: 'Resource represents the resource that is impacted by this event.

            '
          type: string
        sourceIPs:
          description: 'Source IPs, from where the request originated and intermediate proxies (optional).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        time:
          description: 'Time is the time at which the request was generated.

            '
          format: date-time
          type: string
        user:
          $ref: '#/components/schemas/kubeaudit.EventUserInfo'
        verb:
          description: 'Verb is the kubernetes verb associated with the request.

            '
          type: string
      type: object
    types.MgmtAuditFilters:
      description: MgmtAuditFilters are filters for management audit queries
      properties:
        type:
          description: 'Type is the management audit type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        username:
          description: 'Usernames is a filter for specific users.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      type: object
    -_shared.HostNetworkFirewallProfileAudits:
      items:
        $ref: '#/components/schemas/shared.HostNetworkFirewallProfileAudits'
      type: array
    shared.RuntimeAttackType:
      description: RuntimeAttackType is the sub-category of the attack (e.g., malware process, process not in model, etc...)
      enum:
      - - ''
        - cloudMetadataProbing
        - kubeletAPIAccess
        - kubeletReadonlyAccess
        - kubectlSpawned
        - kubectlDownloaded
        - horizontalPortScanning
        - verticalPortScanning
        - explicitlyDeniedIP
        - customFeedIP
        - feedIP
        - unexpectedOutboundPort
        - suspiciousNetworkActivity
        - unexpectedListeningPort
        - explicitlyDeniedListeningPort
        - explicitlyDeniedOutboundPort
        - listeningPortModifiedProcess
        - outboundPortModifiedProcess
        - feedDNS
        - explicitlyDeniedDNS
        - dnsQuery
        - unexpectedProcess
        - portScanProcess
        - malwareProcessCustom
        - malwareProcessFeed
        - explicitlyDeniedProcess
        - modifiedProcess
        - cryptoMinerProcess
        - lateralMovementProcess
        - tmpfsProcess
        - policyHijacked
        - reverseShell
        - suidBinaries
        - unknownOriginBinary
        - webShell
        - administrativeAccount
        - encryptedBinary
        - sshAccess
        - explicitlyDeniedFile
        - malwareFileCustom
        - malwareFileFeed
        - execFileAccess
        - elfFileAccess
        - secretFileAccess
        - regFileAccess
        - wildfireMalware
        - unknownOriginBinary
        - webShell
        - fileIntegrity
        - alteredBinary
        - malwareDownloaded
        - suspiciousELFHeader
        - executionFlowHijackAttempt
        - customRule
      type: string
    shared.HostNetworkFirewallSubtypeAudits:
      description: HostNetworkFirewallSubtypeAudits represents the host network firewall sub type audits per profile
      properties:
        audits:
          description: 'Audits are the host network firewall audits associated with the sub-type, limited to the determined capacity.

            '
          items:
            $ref: '#/components/schemas/cnnf.HostAudit'
          type: array
        count:
          description: 'Count is the total count of the sub-type audits.

            '
          type: integer
      type: object
    types.AuditTimeslice:
      description: AuditTimeslice counts the number of audit events for a given time period
      properties:
        count:
          description: 'Count is the number of audit occurrences.

            '
          type: integer
        end:
          description: 'End is the end time of the bucket.

            '
          format: date-time
          type: string
        start:
          description: 'Start is the start time of the bucket.

            '
          format: date-time
          type: string
      type: object
    shared.RuntimeSeverity:
      description: RuntimeSeverity represents the runtime severity
      enum:
      - - low
        - medium
        - high
      type: string
    common.CloudProvider:
      description: CloudProvider specifies the cloud provider name
      enum:
      - - aws
        - azure
        - gcp
        - alibaba
        - oci
        - others
      type: string
    string:
      type: string
    -_shared.ContainerNetworkFirewallProfileAudits:
      items:
        $ref: '#/components/schemas/shared.ContainerNetworkFirewallProfileAudits'
      type: array
    waas.AttackType:
      description: AttackType is the type of the attack
      enum:
      - - xss
        - sqli
        - cmdi
        - lfi
        - codeInjection
        - deniedIP
        - deniedCountry
        - header
        - violationsExceeded
        - attackTools
        - shellshock
        - disallowedFile
        - malformedRequest
        - inspectionLimitExceeded
        - informationLeak
        - unexpectedAPI
        - dos
        - searchEngineCrawler
        - businessAnalyticsBot
        - educationalBot
        - newsBot
        - financialBot
        - contentFeedClient
        - archivingBot
        - careerSearchBot
        - mediaSearchBot
        - genericBot
        - webAutomationTool
        - webScraper
        - apiLibrary
        - httpLibrary
        - sessionValidation
        - javascriptTimeout
        - missingCookie
        - browserImpersonation
        - botImpersonation
        - requestAnomalies
        - userDefinedBot
        - recaptchaRequired
        - recaptchaVerificationFailed
        - customRule
        - publicSensitiveDataWithoutAuthentication
        - publicSensitiveDataWithoutEncryption
      type: string
    waas.OWASPTop10:
      description: OWASPTop10 represents OWASP top 10 attacks
      enum:
      - - brokenAccessControl
        - cryptographicFailures
        - injection
        - insecureDesign
      type: string
    prisma.ServiceProvider:
      description: ServiceProvider represents service provider id or "other" in case it is non cloud.
      enum:
      - - aws
        - azure
        - gcp
        - alibaba_cloud
        - oci
        - other
      type: string
    shared.TrustAudits:
      description: TrustAudits represents the trust profile audits
      properties:
        _id:
          description: 'ProfileID is the runtime profile ID.

            '
          type: string
        audits:
          additionalProperties:
            $ref: '#/components/schemas/shared.TrustRegistryRepoAudits'
          description: 'Audits is a map from trust status (audits are only for untrusted type) to the audit events list.

            '
          type: object
        cluster:
          description: 'Cluster is the cluster from which the audit originated.

            '
          type: string
        collections:
          description: 'Collections are collections to which this audit applies.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        imageName:
          description: 'ImageName is the container image name.

            '
          type: string
        label:
          description: 'Label represents the container deployment label.

            '
          type: string
        os:
          description: 'OS is the operating system distribution.

            '
          type: string
        resource:
          $ref: '#/components/schemas/common.RuntimeResource'
        time:
          description: 'Time is the UTC time of the last audit event.

            '
          format: date-time
          type: string
        total:
          description: 'Total is the total count of audits per runtime profile.

            '
          type: integer
      type: object
    shared.Incident:
      description: Incident represents an incident
      properties:
        _id:
          description: 'Internal ID of the incident.

            '
          type: string
        accountID:
          description: 'Cloud account ID.

            '
          type: string
        acknowledged:
          description: 'Indicates if the incident has been acknowledged (true) or not (false).

            '
          type: boolean
        app:
          description: 'Application that caused the incident.

            '
          type: string
        appID:
          description: 'Application ID.

            '
          type: string
        audits:
          description: 'All runtime audits of the incident.

            '
          items:
            $ref: '#/components/schemas/shared.RuntimeAudit'
          type: array
        category:
          $ref: '#/components/schemas/shared.IncidentCategory'
        cluster:
          description: 'Cluster on which the incident was found.

            '
          type: string
        collections:
          description: 'Collections to which this incident applies.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        containerID:
          description: 'ID of the container that triggered the incident.

            '
          type: string
        containerName:
          description: 'Unique container name.

            '
          type: string
        customRuleName:
          description: 'Name of the custom runtime rule that triggered the incident.

            '
          type: string
        fqdn:
          description: 'Current hostname''s full domain name.

            '
          type: string
        function:
          description: 'Name of the serverless function.

            '
          type: string
        functionID:
          description: 'ID of the function that triggered the incident.

            '
          type: string
        hostname:
          description: 'Current hostname.

            '
          type: string
        imageID:
          description: 'Container image ID.

            '
          type: string
        imageName:
          description: 'Container image name.

            '
          type: string
        labels:
          additionalProperties:
            $ref: '#/components/schemas/string'
          description: 'Custom labels associated with the container.

            '
          type: object
        namespace:
          description: 'k8s deployment namespace.

            '
          type: string
        profileID:
          description: 'Runtime profile ID.

            '
          type: string
        provider:
          $ref: '#/components/schemas/common.CloudProvider'
        region:
          description: 'Region of the resource on which the incident was found.

            '
          type: string
        resourceID:
          description: 'Unique ID of the resource on which the incident was found.

            '
          type: string
        runtime:
          description: 'Runtime of the serverless function.

            '
          type: string
        serialNum:
          description: 'Serial number of the incident.

            '
          type: integer
        shouldCollect:
          description: 'Indicates if this incident should be collected (true) or not (false).

            '
          type: boolean
        time:
          description: 'Time of the incident (in UTC time).

            '
          format: date-time
          type: string
        type:
          $ref: '#/components/schemas/shared.IncidentType'
        vmID:
          description: 'Azure unique VM ID on which the incident was found.

            '
          type: string
        windows:
          description: 'Windows indicates if defender OS type is Windows.

            '
          type: boolean
      type: object
    shared.MgmtType:
      description: MgmtType represents management audit types
      enum:
      - - login
        - profile
        - settings
        - rule
        - user
        - group
        - credential
        - tag
        - role
        - pairing
      type: string
    shared.AppFirewallAudit:
      description: AppFirewallAudit represents a firewall audit event
      properties:
        _id:
          description: 'ID is internal id representation.

            '
          type: string
        accountID:
          description: 'AccountID is the cloud account ID where the audit was generated.

            '
          type: string
        additionalHash:
          description: 'AdditionalHash for internal use only. This parameter is used to add an additional level of uniqueness to the audit.

            '
          type: string
        appID:
          description: 'AppID is the  application ID.

            '
          type: string
        attackField:
          $ref: '#/components/schemas/waas.HTTPField'
        attackTechniques:
          description: 'AttackTechniques are the MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/mitre.Technique'
          type: array
        cloudProviderName:
          $ref: '#/components/schemas/prisma.ServiceProvider'
        cluster:
          description: 'Cluster is the cluster on which the audit was originated.

            '
          type: string
        collections:
          description: 'Collections are collections to which this audit applies.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        connectingIPs:
          description: 'ConnectingIPs are the requests connecting IPs such as proxy and load-balancer.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        containerId:
          description: 'ContainerID is the firewall container ID.

            '
          type: string
        containerName:
          description: 'ContainerName is the firewall container name.

            '
          type: string
        count:
          description: 'Count is the number of audit occurrences.

            '
          type: integer
        country:
          description: 'Country is the source IP country.

            '
          type: string
        effect:
          $ref: '#/components/schemas/waas.Effect'
        eventID:
          description: 'EventID is the event identifier of the audit relevant request.

            '
          type: string
        firewallType:
          $ref: '#/components/schemas/waas.FirewallType'
        fqdn:
          description: 'FQDN is the current hostname''s FQDN.

            '
          type: string
        function:
          description: 'Function is the name of the serverless function that caused the audit.

            '
          type: string
        functionID:
          description: 'FunctionID is the id of the function called.

            '
          type: string
        host:
          description: 'Host indicates this audit is either for host firewall or out of band firewall or agentless firewall.

            '
          type: boolean
        hostname:
          description: 'Hostname is the current hostname.

            '
          type: string
        imageID:
          description: 'ImageID is the firewall image ID.

            '
          type: string
        imageName:
          description: 'ImageName is the firewall image name.

            '
          type: string
        labels:
          additionalProperties:
            $ref: '#/components/schemas/string'
          description: 'Labels are the custom labels associated with the container.

            '
          type: object
        method:
          description: 'HTTPMethod is the request HTTP method.

            '
          type: string
        modelPath:
          description: 'ModelPath for internal use only. This parameter is a correlated path for the mapped API Model.

            '
          type: string
        msg:
          description: 'Message is the blocking message text.

            '
          type: string
        ns:
          description: 'Namespaces are the k8s namespaces.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        os:
          description: 'OS is the operating system distribution.

            '
          type: string
        owaspAPITop10:
          $ref: '#/components/schemas/waas.OWASPAPITop10'
        owaspTop10:
          $ref: '#/components/schemas/waas.OWASPTop10'
        prismaAccountID:
          description: 'PrismaAccountID is the Prisma format account ID.

            '
          type: string
        prismaCloudProvider:
          $ref: '#/components/schemas/prisma.CloudType'
        prismaRegion:
          description: 'PrismaRegion is the Prisma format cloud region.

            '
          type: string
        profileId:
          description: 'ProfileID is the profile of the audit.

            '
          type: string
        protection:
          $ref: '#/components/schemas/waas.Protection'
        provider:
          $ref: '#/components/schemas/common.CloudProvider'
        rawEvent:
          description: 'RawEvent contains unparsed function handler event input.

            '
          type: string
        region:
          description: 'Region is the name of the region in which the serverless function is located.

            '
          type: string
        requestHeaderNames:
          description: 'RequestHeaderNames are the request header names.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        requestHeaders:
          description: 'RequestHeaders represent the request headers.

            '
          type: string
        requestHost:
          description: 'RequestHost is the request host.

            '
          type: string
        requestID:
          description: 'RequestID is lambda function invocation request id.

            '
          type: string
        resource:
          $ref: '#/components/schemas/common.RuntimeResource'
        responseHeaderNames:
          description: 'ResponseHeaderNames are the response header names.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        ruleAppID:
          description: 'RuleAppID is the ID of the rule''s app that was applied.

            '
          type: string
        ruleName:
          description: 'RuleName is the name of the rule that was applied.

            '
          type: string
        runtime:
          $ref: '#/components/schemas/shared.LambdaRuntimeType'
        statusCode:
          description: 'StatusCode is the response status code.

            '
          type: integer
        subnet:
          description: 'Subnet is the source IP subnet.

            '
          type: string
        time:
          description: 'Time is the UTC time of the audit event.

            '
          format: date-time
          type: string
        type:
          $ref: '#/components/schemas/waas.AttackType'
        url:
          description: 'URL is the requests full URL (partial on server side - path and query only).

            '
          type: string
        urlPath:
          description: 'URLPath is the requests url path.

            '
          type: string
        urlQuery:
          description: 'URLQuery is the requests url query.

            '
          type: string
        userAgentHeader:
          description: 'UserAgentHeader is the requests User-Agent header.

            '
          type: string
        version:
          description: 'Version is the defender version.

            '
          type: string
        workloadAssetType:
          $ref: '#/components/schemas/prisma.AssetType'
        workloadExternalResourceID:
          description: 'WorkloadExternalResourceID is the workload external resource ID (Asset External ID).

            '
          type: string
      type: object
    waas.FirewallType:
      description: FirewallType represents the firewall type
      enum:
      - - host-proxy
        - host-out-of-band
        - container-proxy
        - container-out-of-band
        - app-embedded
        - agentless
        - REST
      type: string
    shared.LogInspectionEvent:
      description: LogInspectionEvent is a log inspection event detected according to the log inspection rules
      properties:
        _id:
          description: 'ID is event''s unique identifier.

            '
          type: string
        accountID:
          description: 'AccountID is the cloud account ID.

            '
          type: string
        cluster:
          description: 'Cluster is the cluster on which the event was found.

            '
          type: string
        collections:
          description: 'Collections are collections to which this event applies.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        hostname:
          description: 'Hostname is the hostname on which the event was found.

            '
          type: string
        line:
          description: 'Line is the matching log line.

            '
          type: string
        logfile:
          description: 'Logfile is the log file which triggered the event.

            '
          type: string
        ruleName:
          description: 'RuleName is the name of the applied rule for auditing log inspection events.

            '
          type: string
        time:
          description: 'Time is the time of the event.

            '
          format: date-time
          type: string
      type: object
    shared.FileIntegrityEvent:
      description: FileIntegrityEvent represents a single file integrity event detected according to the file integrity monitoring rules
      properties:
        _id:
          description: 'ID is activity''s unique identifier.

            '
          type: string
        accountID:
          description: 'AccountID is the cloud account ID.

            '
          type: string
        cluster:
          description: 'Cluster is the cluster on which the event was found.

            '
          type: string
        collections:
          description: 'Collections are collections to which this event applies.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        description:
          description: 'Description is a human readable description of the action performed on the path.

            '
          type: string
        eventType:
          $ref: '#/components/schemas/shared.FileIntegrityEventType'
        fileType:
          $ref: '#/components/schemas/runtime.FSFileType'
        fqdn:
          description: 'FQDN is the current fully qualified domain name used in audit alerts.

            '
          type: string
        hostname:
          description: 'Hostname is the hostname on which the event was found.

            '
          type: string
        metadata:
          $ref: '#/components/schemas/shared.FileMetadata'
        path:
          description: 'Path is the absolute path of the event.

            '
          type: string
        processName:
          description: 'ProcessName is the name of the process initiated the event.

            '
          type: string
        ruleName:
          description: 'RuleName is the name of the applied rule for auditing file integrity rules.

            '
          type: string
        time:
          description: 'Time is the time of the event.

            '
          format: date-time
          type: string
        user:
          description: 'User is the user initiated the event.

            '
          type: string
      type: object
    prisma.CloudType:
      description: 'CloudType is the prisma cloud type of the resource that is used for policy verdict creation

        Cloud type values are documented here - https://docs.google.com/spreadsheets/d/1ZRlPl2IdEX22-7pSnqxeJGwwS0jyUbJJ16IkuPoiHMU'
      enum:
      - - '1'
        - '2'
        - '3'
        - '4'
        - '5'
        - '6'
      type: integer
    -_shared.TrustAudits:
      items:
        $ref: '#/components/schemas/shared.TrustAudits'
      type: array
    -_admission.Audit:
      items:
        $ref: '#/components/schemas/admission.Audit'
      type: array
    shared.TrustRegistryRepoAudits:
      description: TrustRegistryRepoAudits represents the trust registry/repo audits per profile
      properties:
        audits:
          description: 'Audits are the trust audits associated with the registry/repo, limited to the determined capacity.

            '
          items:
            $ref: '#/components/schemas/shared.TrustAudit'
          type: array
        count:
          description: 'Count is the total count of the sub-type audits.

            '
          type: integer
      type: object
    shared.FileIntegrityEventType:
      description: FileIntegrityEventType represents the type of the file integrity event
      enum:
      - - metadata
        - read
        - write
      type: string
    shared.LambdaRuntimeType:
      description: 'LambdaRuntimeType represents the runtime type of the serverless function

        The constants used are taken from: https://docs.aws.amazon.com/lambda/latest/dg/API_CreateFunction.html#SSS-CreateFunction-request-Runtime'
      enum:
      - - python
        - python3.9
        - python3.10
        - python3.11
        - python3.12
        - python3.13
        - nodejs
        - nodejs18.x
        - nodejs20.x
        - nodejs22.x
        - dotnet
        - dotnetcore2.1
        - dotnetcore3.1
        - dotnet6
        - java
        - java8
        - java11
        - java17
        - java21
        - ruby
      type: string
    runtime.FSFileType:
      description: FSFileType represents the file type
      type: integer
    waas.Effect:
      description: Effect is the effect that will be used in the rule
      enum:
      - - ban
        - prevent
        - alert
        - allow
        - disable
        - reCAPTCHA
      type: string
    cnnf.HostAudit:
      description: HostAudit represents a host network firewall audit event
      properties:
        accountID:
          description: 'AccountID is the host account ID.

            '
          type: string
        block:
          description: 'Block indicates whether the connection was blocked.

            '
          type: boolean
        cluster:
          description: 'Cluster is the cluster from which the audit originated.

            '
          type: string
        count:
          description: 'Count is the event occurrences count.

            '
          type: integer
        dstHostname:
          description: 'DstHostname is the destination hostname.

            '
          type: string
        dstPort:
          description: 'DstPort is the connection destination port.

            '
          type: integer
        dstSubnet:
          description: 'DstSubnet is the destination subnet.

            '
          type: string
        msg:
          description: 'Message is the event message.

            '
          type: string
        ruleID:
          $ref: '#/components/schemas/cnnf.RuleID'
        srcHash:
          $ref: '#/components/schemas/common.ProfileHash'
        srcHostname:
          description: 'SrcHostname is the source hostname.

            '
          type: string
        srcSubnet:
          description: 'SrcSubnet is the source subnet.

            '
          type: string
        time:
          description: 'Time is the UTC time of the audit event.

            '
          format: date-time
          type: string
        type:
          $ref: '#/components/schemas/cnnf.NetworkFirewallAttackType'
      type: object
    -_shared.MgmtAudit:
      items:
        $ref: '#/components/schemas/shared.MgmtAudit'
      type: array
    shared.HostNetworkFirewallProfileAudits:
      description: HostNetworkFirewallProfileAudits represents the host network firewall profile audits
      properties:
        _id:
          description: 'ProfileID is the runtime profile ID.

            '
          type: string
        audits:
          additionalProperties:
            $ref: '#/components/schemas/shared.HostNetworkFirewallSubtypeAudits'
          description: 'Audits is a map from the audit sub-type to the audit events list.

            '
          type: object
        cluster:
          description: 'Cluster is the cluster from which the audit originated.

            '
          type: string
        collections:
          description: 'Collections are collections to which this audit applies.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        imageName:
          description: 'ImageName is the container image name.

            '
          type: string
        label:
          description: 'Label represents the container deployment label.

            '
          type: string
        os:
          description: 'OS is the operating system distribution.

            '
          type: string
        resource:
          $ref: '#/components/schemas/common.RuntimeResource'
        time:
          description: 'Time is the UTC time of the last audit event.

            '
          format: date-time
          type: string
        total:
          description: 'Total is the total count of audits per runtime profile.

            '
          type: integer
      type: object
    -_shared.Incident:
      items:
        $ref: '#/components/schemas/shared.Incident'
      type: array
    shared.MgmtAudit:
      description: MgmtAudit represents a management audit in the system
      properties:
        api:
          description: 'API is the api used in the audit process.

            '
          type: string
        diff:
          description: 'Diff is the diff between old and new values.

            '
          type: string
        failure:
          description: 'Failure states whether the request failed or not.

            '
          type: boolean
        sourceIP:
          description: 'SourceIP is the request''s source IP.

            '
          type: string
        status:
          description: 'Status is the request''s response status.

            '
          type: string
        time:
          description: 'Time is the time of the request.

            '
          format: date-time
          type: string
        type:
          $ref: '#/components/schemas/shared.MgmtType'
        username:
          description: 'Username is the username of the user who performed the action.

            '
          type: string
      type: object
    -_shared.RuntimeAudit:
      items:
        $ref: '#/components/schemas/shared.RuntimeAudit'
      type: array
    shared.IncidentType:
      description: IncidentType is the type of the incident
      enum:
      - - host
        - container
        - function
        - appEmbedded
        - fargate
      type: string
    shared.RuntimeType:
      description: RuntimeType represents the runtime protection type
      enum:
      - - processes
        - network
        - kubernetes
        - filesystem
      type: string
    runtime.RuleEffect:
      description: RuleEffect is the effect that will be used in the runtime rule
      enum:
      - - block
        - prevent
        - alert
        - disable
      type: string
    waas.HTTPFieldType:
      description: HTTPFieldType indicates type of http field
      enum:
      - - method
        - xmlBody
        - jsonBody
        - formBody
        - multipartBody
        - rawBody
        - rawBodyResponse
        - protobufBody
        - query
        - queryParamName
        - cookie
        - header
        - url
      type: string
    common.ProfileHash:
      description: 'ProfileHash represents the profile hash

        It is allowed to contain up to uint32 numbers, and represented by int64 since mongodb does not support unsigned data types'
      format: int64
      type: integer
    shared.IncidentCategory:
      description: IncidentCategory is the incident category
      enum:
      - - portScanning
        - hijackedProcess
        - dataExfiltration
        - kubernetes
        - backdoorAdministrativeAccount
        - backdoorSSHAccess
        - cryptoMiner
        - lateralMovement
        - bruteForce
        - customRule
        - alteredBinary
        - suspiciousBinary
        - executionFlowHijackAttempt
        - reverseShell
        - malware
        - cloudProvider
      type: string
    waas.OWASPAPITop10:
      description: OWASPAPITop10 represents OWASP API top 10 attacks
      enum:
      - - excessiveDataExposure
        - lackOfResources&RateLimiting
        - brokenFunctionLevelAuthorization
        - securityMisconfiguration
        - injection
      type: string
    vuln.Effect:
      description: Effect specifies relevant action for a vulnerability
      enum:
      - - ignore
        - alert
        - block
      type: string
    shared.Audit:
      description: Audit represents an event in the system
      properties:
        accountID:
          description: 'AccountID is the cloud account ID where the audit was created.

            '
          type: string
        allow:
          description: 'Allow indicates whether the command was allowe or denied.

            '
          type: boolean
        api:
          description: 'API is the api that is being audited.

            '
          type: string
        cluster:
          description: 'Cluster is the cluster from which the audit originated.

            '
          type: string
        collections:
          description: 'Collections are collections to which this audit applies.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        containerName:
          description: 'ContainerName is the name of the container.

            '
          type: string
        fqdn:
          description: 'FQDN is the fully qualified domain name from which the audit originated.

            '
          type: string
        hostname:
          description: 'Hostname is the hostname from which the audit originated.

            '
          type: string
        imageName:
          description: 'ImageName is the name of the image.

            '
          type: string
        labels:
          additionalProperties:
            $ref: '#/components/schemas/string'
          description: 'Labels are the labels associated with the target audit (for containers/images).

            '
          type: object
        msg:
          description: 'Msg is the message explaining the audit.

            '
          type: string
        namespace:
          description: 'Namespace is the container namespace.

            '
          type: string
        ruleName:
          description: 'RulesName is contains the name of the rule that was applied, when blocked.

            '
          type: string
        sourceIP:
          description: 'SourceIP is the remote agent''s source IP.

            '
          type: string
        time:
          description: 'Time is the UTC time of the audit event.

            '
          format: date-time
          type: string
        type:
          description: 'Type is the audit type.

            '
          type: string
        user:
          description: 'User is the user that run the command.

            '
          type: string
      type: object
    shared.TrustAudit:
      description: TrustAudit represents a trust audit
      properties:
        _id:
          description: 'ID is the registry-repo of the created container.

            '
          type: string
        accountID:
          description: 'AccountID is the cloud account ID where the audit was generated.

            '
          type: string
        cluster:
          description: 'Cluster is the cluster where the audit was generated.

            '
          type: string
        count:
          description: 'Count is the number of times this audit occurred.

            '
          type: integer
        effect:
          $ref: '#/components/schemas/vuln.Effect'
        imageID:
          description: 'ImageID is the container image id.

            '
          type: string
        imageName:
          description: 'ImageName is the container image name.

            '
          type: string
        msg:
          description: 'Message is the blocking message text.

            '
          type: string
        ruleName:
          description: 'If blocked, contains the name of the rule that was applied.

            '
          type: string
        time:
          description: 'Time is the UTC time of the audit event.

            '
          format: date-time
          type: string
      type: object
    -_shared.LogInspectionEvent:
      items:
        $ref: '#/components/schemas/shared.LogInspectionEvent'
      type: array
    cnnf.ContainerAudit:
      description: ContainerAudit represents a network firewall audit event
      properties:
        block:
          description: 'Block indicates whether the connection was blocked.

            '
          type: boolean
        count:
          description: 'Count is the event occurrences count.

            '
          type: integer
        dstContainerName:
          description: 'DstContainerName is the destination container name.

            '
          type: string
        dstDomain:
          description: 'DstDomain is the destination domain that was queried.

            '
          type: string
        dstImageName:
          description: 'DstImage is the destination image name.

            '
          type: string
        dstPort:
          description: 'DstPort is the connection destination port.

            '
          type: integer
        dstProfileHash:
          $ref: '#/components/schemas/common.ProfileHash'
        dstProfileID:
          description: 'DstProfileID is the destination profile ID.

            '
          type: string
        dstSubnet:
          description: 'DstSubnet is the destination subnet.

            '
          type: string
        labels:
          additionalProperties:
            $ref: '#/components/schemas/string'
          description: 'Labels are the custom labels associated with the target container.

            '
          type: object
        msg:
          description: 'Message is the event message.

            '
          type: string
        ruleID:
          $ref: '#/components/schemas/cnnf.RuleID'
        srcContainerName:
          description: 'SrcContainerName is the source container name.

            '
          type: string
        srcImageName:
          description: 'SrcImage is the source image name.

            '
          type: string
        srcProfileHash:
          $ref: '#/components/schemas/common.ProfileHash'
        srcProfileID:
          description: 'SrcProfileID is the source profile ID.

            '
          type: string
        time:
          description: 'Time is the UTC time of the audit event.

            '
          format: date-time
          type: string
        type:
          $ref: '#/components/schemas/cnnf.NetworkFirewallAttackType'
      type: object
    waas.HTTPField:
      description: HTTPField is used to perform checks on flags and fields
      properties:
        key:
          description: 'Key is the key of the field, if exists (e.g. header and cookie).

            '
          type: string
        type:
          $ref: '#/components/schemas/waas.HTTPFieldType'
        value:
          description: 'Value is the value of the field, if exists.

            '
          type: string
      type: object
    cnnf.NetworkFirewallAttackType:
      description: NetworkFirewallAttackType is the network firewall type of attack
      enum:
      - - unexpectedConnection
      type: string
    -_shared.FileIntegrityEvent:
      items:
        $ref: '#/components/schemas/shared.FileIntegrityEvent'
      type: array
    -_shared.Audit:
      items:
        $ref: '#/components/schemas/shared.Audit'
      type: array
    -_types.AuditTimeslice:
      items:
        $ref: '#/components/schemas/types.AuditTimeslice'
      type: array
    shared.RuntimeAudit:
      description: RuntimeAudit represents a runtime audit event (fires when a runtime policy is violated)
      properties:
        _id:
          description: 'Internal ID (used for in-place updates).

            '
          type: string
        accountID:
          description: 'ID of the cloud account where the audit was generated.

            '
          type: string
        app:
          description: 'Name of the service which violated the host policy.

            '
          type: string
        appID:
          description: 'Application ID.

            '
          type: string
        attackTechniques:
          description: 'MITRE attack techniques.

            '
          items:
            $ref: '#/components/schemas/mitre.Technique'
          type: array
        attackType:
          $ref: '#/components/schemas/shared.RuntimeAttackType'
        cluster:
          description: 'Cluster name.

            '
          type: string
        collections:
          description: 'Collections to which this audit applies.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        command:
          description: 'ScrubbedCommand is the command executed by the process with scrubbed PII.

            '
          type: string
        container:
          description: 'Indicates if this is a container audit (true) or host audit (false).

            '
          type: boolean
        containerId:
          description: 'ID of the container that violates the rule.

            '
          type: string
        containerName:
          description: 'Container name.

            '
          type: string
        count:
          description: 'Attack type audits count.

            '
          type: integer
        country:
          description: 'Outbound country for outgoing network audits.

            '
          type: string
        domain:
          description: 'Domain is the requested domain.

            '
          type: string
        effect:
          $ref: '#/components/schemas/runtime.RuleEffect'
        err:
          description: 'Unknown error in the audit process.

            '
          type: string
        filepath:
          description: 'Filepath is the path of the modified file.

            '
          type: string
        fqdn:
          description: 'Current full domain name used in audit alerts.

            '
          type: string
        function:
          description: 'Name of the serverless function that caused the audit.

            '
          type: string
        functionID:
          description: 'ID of the function invoked.

            '
          type: string
        hostname:
          description: 'Current hostname.

            '
          type: string
        imageId:
          description: 'Container image ID.

            '
          type: string
        imageName:
          description: 'Container image name.

            '
          type: string
        interactive:
          description: 'Indicates if the audit was triggered from a process that was spawned in interactive mode (e.g., docker exec ...) (true) or not (false).

            '
          type: boolean
        ip:
          description: 'IP is the connection destination IP address.

            '
          type: string
        label:
          description: 'Container deployment label.

            '
          type: string
        labels:
          additionalProperties:
            $ref: '#/components/schemas/string'
          description: 'Custom labels which augment the audit data.

            '
          type: object
        md5:
          description: 'MD5 is the MD5 of the modified file (only for executables.

            '
          type: string
        msg:
          description: 'Blocking message text.

            '
          type: string
        namespace:
          description: 'K8s deployment namespace.

            '
          type: string
        os:
          description: 'Operating system distribution.

            '
          type: string
        pid:
          description: 'ID of the process that caused the audit event.

            '
          type: integer
        port:
          description: 'Port is the connection destination port.

            '
          type: integer
        processPath:
          description: 'Path of the process that caused the audit event.

            '
          type: string
        profileId:
          description: 'Profile ID of the audit.

            '
          type: string
        provider:
          $ref: '#/components/schemas/common.CloudProvider'
        rawEvent:
          description: 'Unparsed function handler event input.

            '
          type: string
        region:
          description: 'Region of the resource where the audit was generated.

            '
          type: string
        requestID:
          description: 'ID of the lambda function invocation request.

            '
          type: string
        resourceID:
          description: 'Unique ID of the resource where the audit was generated.

            '
          type: string
        ruleName:
          description: 'Name of the rule that was applied, if blocked.

            '
          type: string
        runtime:
          $ref: '#/components/schemas/shared.LambdaRuntimeType'
        severity:
          $ref: '#/components/schemas/shared.RuntimeSeverity'
        time:
          description: 'Time of the audit event (in UTC time).

            '
          format: date-time
          type: string
        type:
          $ref: '#/components/schemas/shared.RuntimeType'
        user:
          description: 'Service user.

            '
          type: string
        version:
          description: 'Defender version.

            '
          type: string
        vmID:
          description: 'Azure unique VM ID where the audit was generated.

            '
          type: string
        wildFireReportURL:
          description: 'WildFireReportURL is a URL link of the report generated by wildFire.

            '
          type: string
      type: object
    cnnf.RuleID:
      description: RuleID represents the ID of each container network firewall policy rule
      type: integer
    -_kubeaudit.Audit:
      items:
        $ref: '#/components/schemas/kubeaudit.Audit'
      type: array
    common.RuntimeResource:
      description: 'RuntimeResource represents on which resource in the system a rule applies (e.g., specific host or image)

        Empty resource or wildcard (*) represents all resources of a given type'
      properties:
        accountIDs:
          description: 'List of account IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        appIDs:
          description: 'List of application IDs.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        clusters:
          description: 'List of Kubernetes cluster names.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        containers:
          description: 'List of containers.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        functions:
          description: 'List of functions.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        hosts:
          description: 'List of  hosts.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        images:
          description: 'List of images.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        labels:
          description: 'List of labels.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        namespaces:
          description: 'List of Kubernetes namespaces.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      type: object
x-refined-from:
- palo-alto-compute-34-03-openapi-34-03-138-sh-openapi.json
- palo-alto-compute-openapi-34-04-145-sh-openapi.json
- palo-alto-cwpp-34-03-openapi-34-03-138-saas-openapi.json
- palo-alto-cwpp-openapi-34-04-145-saas-openapi.json