Method: legacySearches.legacyGetCasesFilterUserAndRoles

Full name: projects.locations.instances.legacySearches.legacyGetCasesFilterUserAndRoles

legacySearches.legacyGetCasesFilterUserAndRoles to get cases filter user and roles.

HTTP request


POST https://chronicle.africa-south1.rep.googleapis.com/v1alpha/{instance}/legacySearches:legacyGetCasesFilterUserAndRoles

Path parameters

Parameters
instance

string

Required. The instance to get the search results for. Format: projects/{project}/locations/{location}/instances/{instance}

Request body

The request body contains data with the following structure:

JSON representation
{
  "typeOfFilter": enum (LegacyCaseSearchFilterTypeEnum),
  "numberOfValuesToReturn": integer,
  "searchTerm": string
}
Fields
typeOfFilter

enum (LegacyCaseSearchFilterTypeEnum)

Required. Type of filter.

numberOfValuesToReturn

integer

Optional. Number of values to return.

searchTerm

string

Optional. Search term.

Response body

Response for legacySearches.legacyGetCasesFilterUserAndRoles.

If successful, the response body contains data with the following structure:

JSON representation
{
  "socRoles": [
    string
  ],
  "users": [
    {
      object (ApiUserProfileLightMetadata)
    }
  ]
}
Fields
socRoles[]

string

Optional. The soc roles.

users[]

object (ApiUserProfileLightMetadata)

Optional. The users.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the instance resource:

  • chronicle.legacySearches.searchCases

For more information, see the IAM documentation.

LegacyCaseSearchFilterTypeEnum

Enum that represents the case search filter type.

Enums
TAGS Tags filter type.
ENVIRONMENTS Environments filter type.
ASSIGNED_USERS Assigned users filter type.
PRODUCTS Products filter type.
PORTS Ports filter type.
CATEGORY_OUTCOMES Category outcomes filter type.
ALERT_NAME Alert name filter type.
ALERT_TYPE Alert type filter type.
ALERT_PLAYBOOK_TRIGGER Alert playbook trigger filter type.
VENDORS Vendors filter type.
ROOT_CAUSE_CLOSES Root cause closes filter type.
USERS_AND_SOC_ROLES Users and soc roles filter type.

ApiUserProfileLightMetadata

Message that represents an API user profile light metadata.

JSON representation
{
  "identifier": string,
  "firstName": string,
  "lastName": string,
  "userName": string,
  "email": string,
  "socRoleId": string,
  "socRole": string,
  "socRoleIds": [
    string
  ],
  "socRoles": [
    string
  ],
  "avatar": string,
  "loginIdentifier": string
}
Fields
identifier

string

Optional. The identifier.

firstName

string

Optional. The first name.

lastName

string

Optional. The last name.

userName

string

Optional. The user name.

email

string

Optional. The email.

socRoleId

string (int64 format)

Optional. The soc role id.

socRole

string

Optional. The soc role.

socRoleIds[]

string (int64 format)

Optional. The soc role ids.

socRoles[]

string

Optional. The soc roles.

avatar

string

Optional. The avatar.

loginIdentifier

string

Optional. The login identifier.