netflow_dashboard:readUser IDRetrieve enriched NetFlow records (flow data joined to SIM identity, operator, country, APN
and DNS name) of the caller's account, newest first, with cursor pagination: pass the returned
pagination.next_page_token to fetch the next page while pagination.has_more is true.
total counts every matching record on the first page and is -1 on later pages.
Any further query parameter whose name consists only of letters, digits, _ and . is
applied as an exact-match filter on the record field of that name.
A brand with no Console customer is 400.
fromdate-timeWindow start in ISO 8601. Defaults to 2 hours before to. Must not be after to (400).
There is no maximum window. (start_time/end_time are not accepted here.)
todate-timeWindow end in ISO 8601. Defaults to now.
iccidstringFilter by ICCID (with or without the ThingId_ICCID_ prefix).
thing_idstringFilter by ThingId (e.g. ThingId_ICCID_…).
imeistringFilter by IMEI.
imsistringFilter by IMSI.
source_ipstringFilter by source IPv4 address.
destination_ipstringFilter by destination IPv4 address (post-NAT).
destination_portintegerFilter by destination port.
protocolarrayFilter by IP protocol number(s), e.g. 6 = TCP, 17 = UDP. Repeat the parameter to pass several values.
directionarrayFilter by traffic direction(s) (inbound, outbound). Repeat the parameter to pass several values.
classificationarrayFilter by traffic classification(s). Repeat the parameter to pass several values.
countryarrayFilter by country or countries. Repeat the parameter to pass several values.
mno_namearrayFilter by MNO name(s). Repeat the parameter to pass several values.
apnstringFilter by APN.
sim_grouparrayFilter by SIM group name(s). Repeat the parameter to pass several values.
tacarrayFilter by TAC prefix(es) of the IMEI (first 8 digits). Repeat the parameter to pass several values.
host_iparrayFilter by host IP address(es), matched against either the source or the destination. Repeat the parameter to pass several values.
dns_namestringFilter by DNS question name.
account_namestringFilter by account name.
device_ipstringFilter by the device IP assigned to the SIM.
bytes_minintegerOnly records of at least this many bytes.
bytes_maxintegerOnly records of at most this many bytes.
sizeintegerRecords per page (1–10000, default 100; at most 9999 are returned per page).
Default: 100
next_page_tokenstringOpaque cursor from the previous page's pagination.next_page_token. An invalid token is 400.
limitdeprecatedintegerDeprecated alias of size (used only when size is absent).
Enriched NetFlow records retrieved successfully
HTTP status code
Response message
Matching records (first page only; -1 on later pages).
Page size applied.
Cursor for the next page; absent on the last page.
Unique request ID for tracking
Example
{
"status_code": 200,
"message": "Success",
"request_id": "550e8400-e29b-41d4-a716-446655440000",
"data": {
"from": "2026-03-23T13:00:00.000Z",
"to": "2026-03-23T15:00:00.000Z",
"total": 1520,
"pagination": {
"size": 100,
"has_more": true,
"next_page_token": "WzE3MTEyMDAwMDAwMDAsNDJd"
},
"items": [
{
"timestamp": "2026-03-23T14:59:58.000Z",
"direction": "outbound",
"classification": "internet",
"country": "Italy",
"protocol": "TCP",
"port": 443,
"source_ip": "10.20.30.40",
"dest_ip": "142.250.74.110",
"bytes": 1024,
"packets": 8,
"sim_group": "Test Warehouse",
"apn": "iot.example",
"account_name": "Acme Corp",
"imei": "353735110000000",
"tac": "35373511",
"imsi": "295050900000001",
"device_ip": "10.20.30.40",
"mno_name": "VODAFONE ITALIA S.P.A",
"iccid": "8988223000000000001",
"dns_name": "www.google.com"
}
]
}
}Was this page helpful?