Jan 28 2024
7:22 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Jan 28 2024
7:22 AM
getOrganizationApplianceSecurityEvents - deviceMac
Is the deviceMac in this response the hardware address of the Security Appliance?
https://developer.cisco.com/meraki/api/get-organization-appliance-security-events/
{ "ts": "2018-02-11T00:00:00.090210Z", "eventType": "IDS Alert", "deviceMac": "00:18:0a:01:02:03", "clientMac": "A1:B2:C3:D4:E5:F6", "srcIp": "1.2.3.4:34195", "destIp": "10.20.30.40:80", "protocol": "tcp/ip", "priority": "2", "classification": "4", "blocked": true, "message": "SERVER-WEBAPP JBoss JMX console access attempt", "signature": "1:21516:9", "sigSource": "", "ruleId": "meraki:intrusion/snort/GID/1/SID/26267" }
Solved! Go to solution.
1 Accepted Solution
Jan 28 2024
7:27 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2 Replies 2
Jan 28 2024
7:27 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Jan 28 2024
7:27 AM
Yes that's Mac of the meraki appliance
Jan 28 2024
8:06 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Jan 28 2024
8:06 AM
Thanks so much! I was surprised that deviceSerial was not included like it is for network events.
https://api.meraki.com/api/v1/networks/:networkId/events

Get notified when there are additional replies to this discussion.