action threatjammer_log_change_id_v1_log_ip_id_logchange_id_get {
  label: "Get a log event."
  description: "### What\nObtain the full detail of a specific log change.\n\n### Parameters\nThe endpoint accepts only the following parameters in the path:\n- ``logchange_id``: (Mandatory) A unique integer of the change event log.\n\n### Result\nThe result is a JSON object with the following structure:\n- ``self``: the URI of the API call\n- ``cidr``: The CIDR affected by the change.\n- ``score``: The score of the IP address when the event happened. It ranges from 0 to 99.\n- ``risk``: The risk of the IP address when the event happened. The allowed values are: LOW, MEDIUM, HIGH. It's a human readable representation of the score.\n- ``dataset``: The URI of the dataset where the change was logged.\n- ``source``: The URI of the data source where the change was found.\n- ``lapse``: The time elapsed between the event found and the moment the source was queried. The possible values are: 1H, 6H, 12H, 1D, 7D, 30D, 90D, 180D, 365D.\n- ``action``: The action that was performed on the IP address. The allowed values are: ADD, DELETE.\n- ``timestamp``: The UNIX timestamp in milliseconds when the change was logged.\n\n\n### Errors\nThe endpoint will return the following errors:\n- a `404 Not Found` error if there is no event in the log with the ``logchange_ID`` given.\n- a `422 Unprocessable Entity` error if the ``logchange_ID`` is malformed.\n\nIt will also return the API Global errors described in the API description."
  provider: threatjammer
  method: GET
  path: "/v1/log/ip/id/{logchange_id}"
  encoding: json
  input: {
    type: "object"
    properties: {
      logchange_id: {
        type: "integer"
      }
    }
    required: ["logchange_id"]
    additionalProperties: false
  }
  output: {
    type: "object"
    required: ["action", "dataset", "debug", "lapse", "risk", "source", "timestamp"]
    properties: {
      action: {
        type: "string"
        enum: ["ADD", "DELETE"]
      }
      cidr: {
        type: "string"
      }
      dataset: {
        type: "string"
      }
      lapse: {
        type: "string"
        enum: ["1H", "6H", "12H", "1D", "7D", "30D", "90D", "180D", "365D"]
      }
      risk: {
        type: "string"
        enum: ["UNKNOWN", "LOW", "MEDIUM", "HIGH"]
      }
      score: {
        type: "integer"
      }
      self: {
        type: "string"
      }
      source: {
        type: "string"
      }
      timestamp: {
        type: "integer"
      }
    }
  }
}