Skip to main content

List Queries

List all registered LQL queries in your Lacework instance.

External Documentation

To learn more, visit the Lacework documentation.

Example Output​

{
    "data": [
        {
            "evaluatorId": "Cloudtrail",
            "queryId": "LW_Global_...",
            "queryText": "Query...",
            "owner": "user@example.com",
            "lastUpdateTime": "2020-12-16T16:43:37.915Z",
            "lastUpdateUser": "user@example.com",
            "resultSchema": [
                {
                    "name": "EVENT",
                    "dataType": "JSON",
                    "description": "Description of the result"
                },
                {
                    "name": "EVENT_TIME",
                    "dataType": "Timestamp",
                    "description": "Description of the result"
                }
            ]
        },
        {
            "evaluatorId": "Cloudtrail",
            "queryId": "LW_Global2_...",
            "queryText": "Query...",
            "owner": "user@example.com",
            "lastUpdateTime": "2020-12-16T16:43:37.915Z",
            "lastUpdateUser": "user@example.com",
            "resultSchema": [
                {
                    "name": "EVENT",
                    "dataType": "JSON",
                    "description": "Description of the result"
                },
                {
                    "name": "EVENT_TIME",
                    "dataType": "Timestamp",
                    "description": "Description of the result"
                }
            ]
        }
    ]
}

Workflow Library Example​

List Queries with Lacework and Send Results Via Email

Workflow LibraryPreview this Workflow on desktop