List Events
curl --request GET \
--url https://api.your-blindsight.com/api/runtime-security/eventsimport requests
url = "https://api.your-blindsight.com/api/runtime-security/events"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('https://api.your-blindsight.com/api/runtime-security/events', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.your-blindsight.com/api/runtime-security/events",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.your-blindsight.com/api/runtime-security/events"
req, _ := http.NewRequest("GET", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.your-blindsight.com/api/runtime-security/events")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.your-blindsight.com/api/runtime-security/events")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
response = http.request(request)
puts response.read_body{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>"
}
]
}runtime-security
List Events
GET
/
api
/
runtime-security
/
events
List Events
curl --request GET \
--url https://api.your-blindsight.com/api/runtime-security/eventsimport requests
url = "https://api.your-blindsight.com/api/runtime-security/events"
response = requests.get(url)
print(response.text)const options = {method: 'GET'};
fetch('https://api.your-blindsight.com/api/runtime-security/events', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.your-blindsight.com/api/runtime-security/events",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.your-blindsight.com/api/runtime-security/events"
req, _ := http.NewRequest("GET", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api.your-blindsight.com/api/runtime-security/events")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.your-blindsight.com/api/runtime-security/events")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
response = http.request(request)
puts response.read_body{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>"
}
]
}Query Parameters
Required range:
1 <= x <= 500Required range:
0 <= x <= 1000000Pattern:
^(allow|flag|redact|block)$Pattern:
^(input|output|tool_call)$App UUID(s) to filter by
Device UUID(s) to filter by
Filter to events from devices belonging to this user, matches the bound directory email, or the OS account / hostname for devices that haven't completed SSO binding (the same labels the DLP Users tab shows).
Maximum string length:
255Maximum string length:
64Maximum string length:
128Case-insensitive substring match across event id, direction, verdict, injection label, source app, provider, model, blocked reason, and PII categories. Applied before pagination, so total reflects the filtered count.
Maximum string length:
200Only events from enrolled DLP desktop agents (device_id set)
Include distinct source_app / provider values for the current scope (workspace + device_only) so clients can build filter dropdowns without paging through events.
Response
Successful Response

