Filter ClearPass Policy Manager events

get

http://127.0.0.1:8080/thirdPartyServices/clearpass/events/filter

Retrieves ClearPass Policy Manager login/logout events filtered by time range, IP address, username, and event type. Returns authentication events from CPPM integration including user identity, device, and session information.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Query Params

startTime

int64

required

Start of the time range as epoch timestamp in milliseconds. Must be provided and less than or equal to endTime.

endTime

int64

required

End of the time range as epoch timestamp in milliseconds. Must be greater than or equal to startTime.

string

Filter by client IP address. Supports wildcard () at start or end for partial matching (e.g., '192.168.' or '*10.1').

username

string

Filter by username. Supports wildcard () at start or end for partial matching (e.g., 'admin' or '*@domain.com').

limit

int32

1 to 10000

Defaults to 10000

Maximum number of events to return. If not specified or exceeds 10000, defaults to 10000.

type

string

enum

Defaults to All

Event filter type. 'All' returns all events, 'Active' returns only sessions without logout (end_time=0), 'Historical' returns completed sessions with logout timestamp.

Allowed:

Responses

Language

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

200Successfully retrieved filtered ClearPass events.

400Invalid request parameters. Returned when startTime or endTime is missing, or endTime is less than startTime.