- HTTP request
- Path parameters
- Query parameters
- Request body
- Response body
- Authorization scopes
- IAM Permissions
- Try it!
Full name: projects.locations.instances.legacy.legacyFindAssetEvents
Legacy endpoint for getting events for an asset indicator.
HTTP request
GET https://chronicle.googleapis.com/v1alpha/{instance}/legacy:legacyFindAssetEvents
Path parameters
Parameters | |
---|---|
instance |
Required. Chronicle instance this request is sent to. Format: projects/{project}/locations/{location}/instances/{instance} |
Query parameters
Parameters | |
---|---|
assetIndicator |
Required. The asset to return events for. |
referenceTime |
The time used to alias indicator and fetch results of the asset. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: |
timeRange |
Required. The time range of the events to return [inclusive start time, exclusive end time). |
maxResults |
The maximum number of events to return. The service may return fewer than this value. If unspecified, at most 10,000 events will be returned. The maximum value is 250,000; values above that will be coerced to 250,000. |
Request body
The request body must be empty.
Response body
Response message for LegacyFindAssetEvents, containing all events related to an asset in a particular timeframe.
If successful, the response body contains data with the following structure:
JSON representation |
---|
{
"events": [
{
object ( |
Fields | |
---|---|
events[] |
A list of events, sorted in ascending order of timestamp. |
more_data_available |
Indicates that more data was available but not sent due to more hits than max_results. |
uri[] |
URLs that direct into the Backstory UI. |
Authorization scopes
Requires the following OAuth scope:
https://www.googleapis.com/auth/cloud-platform
For more information, see the Authentication Overview.
IAM Permissions
Requires the following IAM permission on the instance
resource:
chronicle.legacies.legacyFindAssetEvents
For more information, see the IAM documentation.