Creating a Security Analysis Query

project_id

Yes

String

Definition

Project ID, which is used to specify the project that a resource belongs to. You can query the resources of a project by project ID. You can obtain the project ID from the API or console. Obtaining the Project ID

Constraints

N/A

Range

N/A

Default Value

N/A

workspace_id

Yes

String

Workspace ID.

table_id

Yes

String

Table ID.

X-Auth-Token

Yes

String

Definition

User token. You can obtain it by calling the IAM API for obtaining a user token. The user token is the value of X-Subject-Token in the response header. Obtaining a User Token

Constraints

N/A

Range

N/A

Default Value

N/A

query

Yes

String

Retrieval query criteria. For details about the syntax, see the help documentation.

from

No

Integer

Timestamp, in ms.

to

No

Integer

Timestamp, in ms.

limit

Yes

Long

Number of records on each page.

offset

No

Long

Page number.

script_params

No

Array of SearchScriptParam objects

Script parameters.

key

No

String

Key.

value

No

String

Value.

schema

Array of SearchQueryField objects

Query result.

datarows

Array<Array<>>

Query result row.

total

Integer

Total number.

size

Integer

Total number.

results

Array of SearchQueryResult objects

Result list.

name

String

Field name.

type

String

Definition

Data type.

• boolean: boolean data

• byte: byte data

• short: short integer

• integer: integer data

• long: long integer

• float: single-precision floating point

• half_float: half-precision floating point

• scaled_float: scaling floating point

• double: double-precision floating point

• keyword: keyword data

• text: text data

• date: date data

• ip: IP addresses

• binary: binary data

• object: object data

• nested: nested data

Constraints

N/A

Range

• boolean

• byte

• short

• integer

• long

• float

• half_float

• scaled_float

• double

• keyword

• text

• date

• ip

• binary

• object

• nested

Default Value

N/A

alias

String

Field alias.

timestamp

String

Timestamp.

data_source

AnyType

Data source.

200

Request succeeded. A security analysis query result is returned.