搜索看看
WGLOG查询主机告警日志列表接口(
需要升级到专业版
)
即威胁检测分析模块的列表数据,不返回具体的日志内容,
具体日志内容使用这个接口获取
1、示例,下面【2】是参数说明:
将请求URL中的IP和端口替换为自己的实际信息即可
请求URL:http://localhost:9993/agentLogOpenQuery/dangerLogInfoList 请求方式:POST 请求参数(Content-Type:application/json): { "wgToken": "65d05df102851c6535322e73b2f99c06", "page": 1, "pageSize": 20, "hostname": "192.168.1.2", "logFileName": "auth.log", "infoContent": "错误", "startTime": "2026-08-11 08:17:59", "endTime": "2026-08-12 08:17:59" } 返回结果: { "code": "0", "msg": "", "data": { "total": 3, "list": [ { "title": "gbk", "warnChars": "未检测到授权文件,Exception", "hostname": "192.168.1.4", "logFileName": "C:\\Users\\tians\\Desktop\\下载\\wglog-v1.5\\server\\log/wglog.2026-04-13.0.log", "logSize": "768.0B", "createTime": 1776066837091, "id": "2043598549534507008" } ], "pages": 1, "pageNum": 1 } }
2、参数说明:
请求参数(Content-Type:application/json): { "wgToken": "必填,config/application.yml里的wgToken配置项的md5加密字符串,大小写均可", "page": "必填,第几页", "pageSize": "必填,每页多少条", "hostname": "可选,主机IP", "logFileName": "可选,日志文件完整路径", "infoContent": "可选,采集日志内容查询关键字符", "startTime": "可选,采集时间,开始时间", "endTime": "可选,采集时间,结束时间" } 返回结果: { "code": "0成功,1错误", "msg": "错误信息", "data": { "total": "总共多少条", "list": [ { "title": "摘要说明", "warnChars": "告警关键字,多个使用逗号隔开", "hostname": "主机IP", "logFileName": "日志文件路径", "logSize": "本次采集日志内容体积大小", "createTime": "添加时间,毫秒", "id": "2043598549534507008" } ], "pages": "总共多少页", "pageNum": "当前第几页" } }