Skip to main content

Get Search Query by ID

GET 

/search/history/:id

Returns a search query. You can access only queries that are either saved or recent searches.

Request

Path Parameters

    id stringrequired

    Search ID

Responses

successful operation

Schema
    alertId string

    Alert ID

    async boolean

    true = Is Async

    asyncResultUrl string

    Async Result Url

    cloudType string

    Possible values: [aws, azure, gcp, alibaba_cloud, oci]

    Cloud Type

    cursor int32

    Cursor

    default boolean
    description string

    Search Description

    filters object[]

    View Order

  • Array [
  • name string

    Name

    operator string

    Possible values: [=]

    Operator

    value string

    Value

  • ]
  • groupBy string[]

    Group By

    id string

    Search ID

    name string

    Search Name

    query stringrequired

    RQL Query

    saved boolean

    Search Exists

    searchType string

    Possible values: [network, audit_event, config, asset]

    Search Type

    timeGranularity string

    Time Granularity

    timeRange objectrequired

    See the Time Range Model for details.

    oneOf
    relativeTimeType string

    Possible values: [BACKWARD, FORWARD]

    Direction in which to count time. Default = BACKWARD

    type string
    value objectrequired

    Model for RelativeTimeDuration

    amount int32

    Number of time units

    unit string

    Possible values: [minute, hour, day, week, month, year]

    Time unit

    type stringrequired

    Possible values: [absolute, relative, to_now]

    Time type

    type string
    value objectrequired

    Model for Time

    endTime int64

    End timestamp

    startTime int64

    Start timestamp

Loading...