Method: legacySdk.legacyGetAlertsTicketIdsFromCasesClosedSinceTimestamp

• HTTP request
• Path parameters
• Query parameters
• Request body
• Response body
• Authorization scopes
• IAM Permissions

Full name: projects.locations.instances.legacySdk.legacyGetAlertsTicketIdsFromCasesClosedSinceTimestamp

Returns the alert ticket identifiers associated with cases that were closed after the specified timestamp. Use this method to retrieve a history of resolved threats for synchronization with external ticketing systems or for compliance reporting.

HTTP request

Choose a location:

africa-south1 asia-northeast1 asia-south1 asia-southeast1 asia-southeast2 australia-southeast1 europe-central2 europe-west12 europe-west2 europe-west3 europe-west6 europe-west9 me-central1 me-central2 me-west1 northamerica-northeast2 southamerica-east1 us eu

POST https://chronicle.africa-south1.rep.googleapis.com/v1alpha/{instance}/legacySdk:legacyGetAlertsTicketIdsFromCasesClosedSinceTimestamp

Path parameters

Parameters
instance	string Required. The GetAlertsTicketIdsFromCasesClosedSinceTimestamp request. Format: projects/{project}/locations/{location}/instances/{instance}/legacySdk:legacyGetAlertsTicketIdsFromCasesClosedSinceTimestamp

Query parameters

Parameters
format	string Optional. The format of the field names in the response. Could be snake or camel.

Request body

The request body contains an instance of Struct.

Response body

If successful, the response is a generic HTTP response whose format is defined by the method.

Authorization scopes

Requires one of the following OAuth scopes:

• https://www.googleapis.com/auth/cloud-platform
• https://www.googleapis.com/auth/chronicle
• https://www.googleapis.com/auth/chronicle.readonly

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the instance resource:

• chronicle.legacySdk.get

For more information, see the IAM documentation.