Creating a Security Analysis Query

project_id

Yes

String

Definition

Project ID, which is used to specify the project that a resource belongs to. You can query the resources of a project by project ID. You can obtain the project ID from the API or console. Obtaining the Project ID

Constraints

N/A

Range

N/A

Default Value

N/A

workspace_id

Yes

String

Workspace ID.

table_id

Yes

String

Table ID.

X-Auth-Token

Yes

String

Definition

User token. You can obtain it by calling the IAM API for obtaining a user token. The user token is the value of X-Subject-Token in the response header. Obtaining a User Token

Constraints

N/A

Range

N/A

Default Value

N/A

query

Yes

String

Retrieval query criteria. For details about the syntax, see the help documentation.

from

No

Integer

Timestamp, in ms.

to

No

Integer

Timestamp, in ms.

limit

Yes

Long

Limit

offset

No

Long

Limit

script_params

No

Array of SearchScriptParam objects

Script parameters.

key

No

String

Key.

value

No

String

Value.

schema

Array of SearchQueryField objects

Query result.

datarows

Array<Array<>>

Query result row.

total

Integer

Total count of results

size

Integer

Returned count of results

results

Array of SearchQueryResult objects

Results in JSON format

name

String

Field name

type

String

Definition

Data type.

• boolean: boolean data

• byte: byte data

• short: short integer

• integer: integer data

• long: long integer

• float: single-precision floating point

• half_float: half-precision floating point

• scaled_float: scaling floating point

• double: double-precision floating point

• keyword: keyword data

• text: text data

• date: date data

• ip: IP addresses

• binary: binary data

• object: object data

• nested: nested data

Constraints

N/A

Range

• boolean

• byte

• short

• integer

• long

• float

• half_float

• scaled_float

• double

• keyword

• text

• date

• ip

• binary

• object

• nested

Default Value

N/A

alias

String

Field alias

timestamp

String

Timestamp

data_source

AnyType

Data source

200

Request succeeded. A security analysis query result is returned.