Method: instances.searchEntities

Full name: projects.locations.instances.searchEntities

Identifies the entity type and retrieves relevant data associated with a specified indicator.

HTTP request

GET https://chronicle.googleapis.com/v1alpha/{instance}:searchEntities

Path parameters

Parameters
instance

string

Required. The ID of the Instance to search entities for. Format: projects/{project}/locations/{location}/instances/{instance}

Query parameters

Parameters
indicator

string

Required. Value of indicator tied to an entity.
pageSize

integer

The maximum number of Entities to return. The service may return fewer than this value. If unspecified, at most 1000 entities will be returned. The maximum value is 1000; values above 1000 will be coerced to 1000.
pageToken

string

A page token, received from a previous SummarizeEntityRequest call. Provide this to retrieve the subsequent page.

Request body

The request body must be empty.

Response body

Response message for search entities.

If successful, the response body contains data with the following structure:

JSON representation 
{
  "entities": [
    {
      object (Entity)
    }
  ],
  "next_page_token": string
}
Fields
entities[]

object (Entity)

A list of entities.
next_page_token

string

A token, which can be sent as page_token to retrieve the next page. If this field is omitted, there are no subsequent pages.

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the instance resource:

  • chronicle.entities.searchEntities

For more information, see the IAM documentation.