Query CloudGuard WAF logs via API

Eve_Z — Fri, 22 Aug 2025 14:00:42 GMT

Hello community,

Anybody tried to query CloudGuard WAF logs via Infinity Events API?

According to the Infinity Events API documentation, I'm sending the following request to /logs_query:

{
"filter": "",
"limit": 100,
"pageLimit": 100,
"cloudService": "CloudGuard WAF",
"timeframe": {
"startTime": "2025-08-21T00:00:00Z",
"endTime": "2025-08-21T23:59:00Z"
},
"accounts": [
"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
]
}

I get the taskID, but when I check the progress the state is "canceled" and error is "Couldn't process request". But, if I do the same query with cloudService: "Harmony Endpoint", I don't have this error.

Thanks in advance.

Regards.

Re: Query CloudGuard WAF logs via API

PhoneBoy — Fri, 22 Aug 2025 22:26:36 GMT

That does appear to be valid syntax per the API docs.
I suggest a TAC case.

topic Re: Query CloudGuard WAF logs via API in API / CLI Discussion

Query CloudGuard WAF logs via API

Re: Query CloudGuard WAF logs via API