Report API


Use the Report API to grab the JSON responses from previous API Vetting calls made within the last 30 days. This can be used to add scoring and risk hit meta-data to other systems such Hadoop, Tableau, and Splunk.

Endpoint (6.1)


The API accepts both HTTPS POST and HTTPS GET.

For GET use the format:


When using POST, make sure to have Content-Type: application/x-www-form-urlencoded

CURL POST API call example:

curl -X POST -H Content-Type:application/x-www-form-urlencoded -d 'apikey=your_apikey' https://feed-api.ehawk.net/report/function/

API Function

Select the action to take using function values:

data search for items matching username lead_id transaction_id

Send up to 100 combinations of lead_id/username/transaction_id name/value pairs. Use []= to create array with multiple items. GET example for two lead_ids:


date Start report at specific time using start or start_epoch

Send start timestamp in format of UTC-1 string without timezone: 2017-06-23 19:54:23, or start_epoch in Unix timestamp: 1498247663. For example:



The response will be a JSON string with each Incident in a new sub JSON string grouped by data type. As an example:

Optional Marketing Append

You can add additional marketing data to the JSON response by using marketing=append

"marketing": {
"timestamp": "2022-06-30 13:42:33 GMT+2",
"lead_id": "12345",
"lead_source": "Source Name",
"sub_id": "100",
"campaign": "Campaign Name",
"postalcode": "12345"

For example:


Report API calls are limited to 500 rows. Use optional paging commands to page through large data sets.

page Default page starts at 1. Increase for each additional block of records. For example, for page 10


num number of records returned. Default is 100 and max is 500.


Status Codes

Status Response
200 OK (no errors)
-6 IP not in ACL
502 Invalid APIKEY or URL