Method: entities.queryEntityRiskScoreModifications

Full name: projects.locations.instances.entities.queryEntityRiskScoreModifications

Query modifications to base entity risk score for an entity.

HTTP request


Path parameters

Parameters
name

string

Required. The entity id to the entity to query entity risk score modifications on. In the entities.queryEntityRiskScoreModifications API, entity id is an encoded string of the Most Reliable Indicator proto (including MRI value, type and namespace), which would finally be a unified representation of Entity resource. Format: projects/{project}/locations/{location}/instances/{instance}/entities/{entity}

Query parameters

Parameters
modificationTimeRange

object (Interval)

Required. Time range to filter the entity risk score modifications.
pageSize

integer

Optional. The maximum number of entity risk score modifications to return. The service may return fewer than this value.
pageToken

string

Optional. Page token retrieved from the previous entities.queryEntityRiskScoreModifications call.

Request body

The request body must be empty.

Response body

Response message for entities.queryEntityRiskScoreModifications method.

If successful, the response body contains data with the following structure:

JSON representation 
{
  "entityRiskScoreModifications": [
    {
      object (EntityRiskScoreModification)
    }
  ],
  "nextPageToken": string
}
Fields
entityRiskScoreModifications[]

object (EntityRiskScoreModification)

List of all entity risk score modifications for an entity. Ordered by EntityRiskScoreModification.modification_time DESC.
nextPageToken

string

A token that can be sent as pageToken to retrieve the next page. If this field is omitted, there are no subsequent pages.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the name resource:

  • chronicle.entities.queryEntityRiskScoreModifications

For more information, see the IAM documentation.