Umbrella Reporting API categories IDs

[jon12]

I am trying to use Umbrella's Reporting API for activity search. As documented by: https://docs.umbrella.com/umbrella-api/reference#activity-all

As can be seen, the categories filter accepts comma delimited ints that represent the categories IDs.

My problem is, I cannot seem to find where those IDs are documented.

In my specific case I am looking for the ID that represent newly seen domains.

Where is there a source that maps those IDs to their value?

[osanniko]

You can use this API endpoint to get the list of all Category names with respective IDs https://docs.umbrella.com/umbrella-api/reference#categories In it in the Utilities section in the documentation.

[a.kadric]

Hi guys, unfortunately the link from @osanniko does not answer the question (anymore). I only get to a page from Cisco which does not help me. Is there not a documentation somewhere that shows me which IDs stand for which event?

[chrivand · Accepted solution]

Hi @a.kadric , please check out the utility function of the Umbrella Reporting v2 API: https://developer.cisco.com/docs/cloud-security/#!categories

[a.kadric]

thank you very much!

[osanniko]

Here is the API documentation on the call you are looking for: https://developer.cisco.com/docs/cloud-security/#!request-samples/get-categories

Here is the API that will return all Categories:

https://reports.api.umbrella.com/v2/organizations/{{umbrella_reporting_org}}/categories

[a.kadric]

@osanniko @chrivand

Maybe I can ask you one more question, if so, would you please look at my other post on the link below. I have worked my way through the documentation you linked but somehow I can't find a solution.

Thanks a lot in advance!

https://community.cisco.com/t5/cloud-edge/umbrella-api-call-for-application/td-p/4551155