Rule ID filter by API-request

How to filter Rule ID from any zone in List Firewall Events querys when I’m sending a query by api -x post? I can filter client Request Path or clientRequest Query. But first I have to get specific rule_id I need, and then response inside of them. The problem is that there are too many requests in all waf-events totally.

Could you share an example API request of what you are trying for more context?

Yes. Here is my request:

echo ‘{ “query”:
“query ListFirewallEvents($zoneTag: string, $filter: FirewallEventsAdaptiveFilter_InputObject) {
viewer {
zones(filter: { zoneTag: $zoneTag }) {
firewallEventsAdaptive(
filter: $filter
limit: 500
orderBy: [datetime_DESC]
) {
action
clientAsn
clientCountryName
clientIP
clientRequestPath
clientRequestQuery
datetime
source
userAgent
}
}
}
}”,
“variables”: {
“zoneTag”: “my_zone”,
“filter”: {
“datetime_geq”: “2024-02-22T22:00:00Z”,
“datetime_leq”: “2024-02-23T22:00:00Z”
}
}
}’ | tr -d ‘\n’ | curl
-X POST
-H “Content-Type: application/json”
-H “X-Auth-Email: my_email”
-H “X-Auth-key: my_key”
-s
-d @-
https://api.cloudflare.com/client/v4/graphql/ > cloudflare.json


I can use
“clientRequestPath”: “/”
“clientRequestQuery”: “utm” in “filter”: {
and it’s works. But I need to filter /security/events?rule-id=f73e4b7a957047f7b0axxxxxxxxxxxxxxxxx