- HTTP request
- Path parameters
- Query parameters
- Request body
- Response body
- Authorization scopes
- Try it!
Lists an organization or source's findings.
To list across all sources for a given location provide a -
as the source id. If no location is specified, finding are assumed to be in global. The following list shows some examples:
/v2/organizations/{organization_id}/sources/-/findings
+/v2/organizations/{organization_id}/sources/-/locations/{locationId}/findings
HTTP request
The URLs use gRPC Transcoding syntax.
Path parameters
Parameters | |
---|---|
parent |
Required. Name of the source the findings belong to. If no location is specified, the default is global. The following list shows some examples:
To list across all sources provide a source_id of
|
Query parameters
Parameters | |
---|---|
filter |
Expression that defines the filter to apply across findings. The expression is a list of one or more restrictions combined via logical operators Restrictions have the form
The supported operators are:
The supported value types are:
The following field and operator combinations are supported:
Usage: This should be milliseconds since epoch or an RFC3339 string. Examples:
|
order |
Expression that defines what fields and order to use for sorting. The string value should follow SQL syntax: comma separated list of fields. For example: "name,parent". The default sorting order is ascending. To specify descending order for a field, a suffix " desc" should be appended to the field name. For example: "name desc,parent". Redundant space characters in the syntax are insignificant. "name desc,parent" and " name desc , parent " are equivalent. The following fields are supported: name parent state category resourceName eventTime securityMarks.marks |
field |
A field mask to specify the Finding fields to be listed in the response. An empty field mask will list all fields. |
page |
The value returned by the last |
page |
The maximum number of results to return in a single response. Default is 10, minimum is 1, maximum is 1000. |
Request body
The request body must be empty.
Response body
If successful, the response body contains an instance of ListFindingsResponse
.
Authorization scopes
Requires the following OAuth scope:
https://www.googleapis.com/auth/cloud-platform
For more information, see the Authentication Overview.