Method: legacySearches.legacyEntitySearchEverything

Full name: projects.locations.instances.legacySearches.legacyEntitySearchEverything

legacySearches.legacyEntitySearchEverything to get search results for entities.

HTTP request


POST https://chronicle.africa-south1.rep.googleapis.com/v1alpha/{instance}/legacySearches:legacyEntitySearchEverything

Path parameters

Parameters
instance

string

Required. The instance to get the search results for. Format: projects/{project}/locations/{location}/instances/{instance}

Request body

The request body contains data with the following structure:

JSON representation
{
  "term": string,
  "type": [
    string
  ],
  "networkName": [
    string
  ],
  "environmentsName": [
    string
  ],
  "requestedPage": integer,
  "pageSize": integer,
  "requestingUser": string,
  "isSuspicious": boolean,
  "isInternalAsset": boolean,
  "isEnriched": boolean
}
Fields
term

string

Optional. Search term.

type[]

string

Optional. List of entity types.

networkName[]

string

Optional. List of network names.

environmentsName[]

string

Optional. List of environment names.

requestedPage

integer

Optional. The requested page.

pageSize

integer

Optional. Number of entries to return.

requestingUser

string

Optional. Requesting user.

isSuspicious

boolean

Optional. Is suspicious.

isInternalAsset

boolean

Optional. Is internal asset.

isEnriched

boolean

Optional. Is enriched.

Response body

Response for legacySearches.legacyEntitySearchEverything.

If successful, the response body contains data with the following structure:

JSON representation
{
  "results": [
    {
      object (LegacyEntitySearchEverythingResult)
    }
  ],
  "totalCount": integer,
  "pageNumber": integer,
  "pageSize": integer
}
Fields
results[]

object (LegacyEntitySearchEverythingResult)

Optional. List of entities results.

totalCount

integer

Optional. Total count of entities.

pageNumber

integer

Optional. Page number.

pageSize

integer

Optional. Page size.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the instance resource:

  • chronicle.legacySearches.searchEntities

For more information, see the IAM documentation.