reject-hostname, you get the rows of the core server that answers the request. The other core servers are asked too, but their rows are not included in the response today. To read every server, call GET /rejectlog/{hostname} for each core server. reject-hostname must name a core server of the platform; any other name returns 404 and no server is asked.reject-received-from, reject-method, reject-address-of-record, reject-user-agent, reject-result, and reject-cause. Each is an exact match on the whole value.GET /rejectlog/count returns {"total": N} for the same filters, counted on the answering core server only.Authorization: Bearer ********************curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/rejectlog?reject-received-from=203.0.113.30&reject-hostname=core1.example.com&reject-method=REGISTER&reject-address-of-record=1001%40example.com&reject-user-agent=ExamplePhone%2F1.0&reject-result=blocked&reject-action=drop&reject-cause=auth-failure&limit=undefined&start=undefined&sort=rcv_time%20desc' \
--header 'Authorization: Bearer <token>'[
{
"reject-received-from": "203.0.113.30",
"reject-hostname": "core1.example.com",
"reject-method": "REGISTER",
"reject-address-of-record": "1001@example.com",
"reject-last-datetime": "2026-09-01T14:30:00+00:00",
"reject-user-agent": "ExamplePhone/1.0",
"reject-contact": "sip:1001@203.0.113.30:5060",
"reject-result": "blocked",
"reject-action": "drop",
"reject-cause": "auth-failure",
"reject-count": 5,
"reject-rate": 1.5
},
{
"reject-received-from": "198.51.100.20",
"reject-hostname": "core1.example.com",
"reject-method": "INVITE",
"reject-address-of-record": "15555550100@example.com",
"reject-last-datetime": "2026-09-01T14:12:00+00:00",
"reject-user-agent": "ExampleScanner/2.1",
"reject-contact": "sip:15555550100@198.51.100.20:5060",
"reject-result": "blocked",
"reject-action": "drop",
"reject-cause": "auth-failure",
"reject-count": 12,
"reject-rate": 0.4
}
]