All Products
Search
Document Center

Cloud Firewall:DescribeSdlEventList

Last Updated:Nov 20, 2025

Retrieves a list of data leak events.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

No authorization for this operation. If you encounter issues with this operation, contact technical support.

Request parameters

Parameter

Type

Required

Description

Example

Lang

string

No

The language of the response.

Valid values:

  • en :

    English

  • zh :

    Chinese

zh

StartTime

integer

No

The start of the time range to query. The value is a UNIX timestamp. Unit: seconds.

1759198702

EndTime

integer

No

The end of the time range to query. The value is a UNIX timestamp. Unit: seconds.

1756433077

CurrentPage

integer

No

The page number.

1

PageSize

integer

No

The page number.

10

SrcIp

string

No

The source IP address.

172.16.0.XXX

DstIp

string

No

The destination IP address.

47.100.102.XXX

Uuid

string

No

The unique ID.

aa58cdf6-6cf8-493c-912d-97619a24****

Location

string

No

The region.

张家口

Sort

string

No

The sorting method.

TotalBytes

Order

string

No

The sort order.

desc

OnlyAiEvt

integer

No

Specifies whether to query only AI-detected events.

0

SensitiveLevel

string

No

The sensitivity level of the data.

S3

Response elements

Element

Type

Description

Example

object

The schema of the response

RequestId

string

The ID of the request.

F06DE24D-6EB9-5F55-B588-7BB946DF****

SdlEventDetailList

array<object>

A list of data leak events.

object

The objects that contain the details of a data leak event.

AssetName

string

The name of the asset.

test

AssetPrivateIp

string

The private IP address of the asset.

47.100.102.XXX

AssetType

string

The type of the asset.

EIP

CategoryName

string

The name of the category.

Trusted

CategoryClassId

string

The category of the intelligence tags. Valid values:

  • Suspicious

  • Malicious

  • Trusted

Trusted

CityId

string

The city ID.

000

CountryId

string

The country ID.

cn

DstIp

string

The destination IP address.

106.14.74.XXX

DstPortList

string

The destination port.

22

EventCnt

integer

The number of events.

1

EventLevel

string

The risk level of the event.

high

EventName

string

The name of the event.

身份证敏感数据泄漏

FirstTime

integer

The time when the event first occurred.

1735697768

LastTime

integer

The time when the event last occurred.

1738636157

LocationName

string

The region where the destination IP address is located.

浙江省杭州市余杭区

Payload

string

The attack payload of the intrusion prevention event.

3082002f02010004067075626c6963a082002002044c33a756020100020100308200103082000c06082b060102010105000500

ProtoList

string

The protocol.

TCP

RegionId

string

The region ID.

cn-hangzhou

SensitiveDataCnt

integer

The amount of sensitive data.

10

SensitiveDataList

array

A list of sensitive data.

string

The sensitive data.

hege***********.com

SensitiveLevel

string

The sensitivity level of the data.

S3

SensitiveType

string

The type of sensitive data.

身份证

SrcIp

string

The source IP address.

104.28.226.XX

SrcPortList

string

The source port.

443

TrafficBytes

integer

The traffic volume in bytes.

0

Uuid

string

The unique ID.

b91035dc-8be4-411d-bec5-e6320af9****

ResourceId

string

The resource ID.

ce347a98f41e849188aa51c56b02a****

ResourceIdType

integer

The type of the resource.

0

TotalCount

integer

The total number of entries.

6

Examples

Success response

JSON format

{
  "RequestId": "F06DE24D-6EB9-5F55-B588-7BB946DF****",
  "SdlEventDetailList": [
    {
      "AssetName": "test",
      "AssetPrivateIp": "47.100.102.XXX",
      "AssetType": "EIP",
      "CategoryName": "Trusted",
      "CategoryClassId": "Trusted",
      "CityId": "000",
      "CountryId": "cn",
      "DstIp": "106.14.74.XXX",
      "DstPortList": "22",
      "EventCnt": 1,
      "EventLevel": "high",
      "EventName": "身份证敏感数据泄漏",
      "FirstTime": 1735697768,
      "LastTime": 1738636157,
      "LocationName": "浙江省杭州市余杭区",
      "Payload": "3082002f02010004067075626c6963a082002002044c33a756020100020100308200103082000c06082b060102010105000500",
      "ProtoList": "TCP",
      "RegionId": "cn-hangzhou",
      "SensitiveDataCnt": 10,
      "SensitiveDataList": [
        "hege***********.com"
      ],
      "SensitiveLevel": "S3",
      "SensitiveType": "身份证",
      "SrcIp": "104.28.226.XX",
      "SrcPortList": "443",
      "TrafficBytes": 0,
      "Uuid": "b91035dc-8be4-411d-bec5-e6320af9****",
      "ResourceId": "ce347a98f41e849188aa51c56b02a****",
      "ResourceIdType": 0
    }
  ],
  "TotalCount": 6
}

Error codes

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.