- HTTP request
- Path parameters
- Request body
- Response body
- Authorization scopes
- IAM Permissions
- LegacyCaseSearchFilterTypeEnum
- ApiUserProfileLightMetadata
- Try it!
Full name: projects.locations.instances.legacySearches.legacyGetCasesFilterUserAndRoles
legacySearches.legacyGetCasesFilterUserAndRoles to get cases filter user and roles.
HTTP request
POST https://chronicle.africa-south1.rep.googleapis.com/v1alpha/{instance}/legacySearches:legacyGetCasesFilterUserAndRoles Path parameters
| Parameters | |
|---|---|
instance |
Required. The instance to get the search results for. Format: projects/{project}/locations/{location}/instances/{instance} |
Request body
The request body contains data with the following structure:
| JSON representation |
|---|
{
"typeOfFilter": enum ( |
| Fields | |
|---|---|
typeOfFilter |
Required. Type of filter. |
numberOfValuesToReturn |
Optional. Number of values to return. |
searchTerm |
Optional. Search term. |
Response body
Response for legacySearches.legacyGetCasesFilterUserAndRoles.
If successful, the response body contains data with the following structure:
| JSON representation |
|---|
{
"socRoles": [
string
],
"users": [
{
object ( |
| Fields | |
|---|---|
socRoles[] |
Optional. The soc roles. |
users[] |
Optional. The users. |
Authorization scopes
Requires the following OAuth scope:
https://www.googleapis.com/auth/cloud-platform
For more information, see the Authentication Overview.
IAM Permissions
Requires the following IAM permission on the instance resource:
chronicle.legacySearches.searchCases
For more information, see the IAM documentation.
LegacyCaseSearchFilterTypeEnum
Enum that represents the case search filter type.
| Enums | |
|---|---|
TAGS |
Tags filter type. |
ENVIRONMENTS |
Environments filter type. |
ASSIGNED_USERS |
Assigned users filter type. |
PRODUCTS |
Products filter type. |
PORTS |
Ports filter type. |
CATEGORY_OUTCOMES |
Category outcomes filter type. |
ALERT_NAME |
Alert name filter type. |
ALERT_TYPE |
Alert type filter type. |
ALERT_PLAYBOOK_TRIGGER |
Alert playbook trigger filter type. |
VENDORS |
Vendors filter type. |
ROOT_CAUSE_CLOSES |
Root cause closes filter type. |
USERS_AND_SOC_ROLES |
Users and soc roles filter type. |
ApiUserProfileLightMetadata
Message that represents an API user profile light metadata.
| JSON representation |
|---|
{ "identifier": string, "firstName": string, "lastName": string, "userName": string, "email": string, "socRoleId": string, "socRole": string, "socRoleIds": [ string ], "socRoles": [ string ], "avatar": string, "loginIdentifier": string } |
| Fields | |
|---|---|
identifier |
Optional. The identifier. |
firstName |
Optional. The first name. |
lastName |
Optional. The last name. |
userName |
Optional. The user name. |
email |
Optional. The email. |
socRoleId |
Optional. The soc role id. |
socRole |
Optional. The soc role. |
socRoleIds[] |
Optional. The soc role ids. |
socRoles[] |
Optional. The soc roles. |
avatar |
Optional. The avatar. |
loginIdentifier |
Optional. The login identifier. |