Get Query Details

Get details about a single LQL query.

External Documentation

To learn more, visit the Lacework documentation.

Parameters

Parameter	Description
Query ID	The ID if the query to get execute. Can be retrieved from the 'List Queries' action.

Example Output

{
    "data": {
        "evaluatorId": "Cloudtrail",
        "queryId": "LW_Global_...",
        "queryText": "Query...",
        "owner": "user@example.com",
        "lastUpdateTime": "2020-12-16T16:43:37.915Z",
        "lastUpdateUser": "user@example.com",
        "resultSchema": [
            {
                "name": "EVENT",
                "dataType": "JSON",
                "description": "Description of the result"
            },
            {
                "name": "EVENT_TIME",
                "dataType": "Timestamp",
                "description": "Description of the result"
            }
        ]
    }
}

Workflow Library Example

Get Query Details with Lacework and Send Results Via Email

Preview this Workflow on desktop