List all registered LQL queries in your Lacework instance.

External Documentation

To learn more, visit the Lacework documentation.

​
Example Output

{
	"data": [
		{
			"evaluatorId": "Cloudtrail",
			"queryId": "LW_Global_...",
			"queryText": "Query...",
			"owner": "user@example.com",
			"lastUpdateTime": "2020-12-16T16:43:37.915Z",
			"lastUpdateUser": "user@example.com",
			"resultSchema": [
				{
					"name": "EVENT",
					"dataType": "JSON",
					"description": "Description of the result"
				},
				{
					"name": "EVENT_TIME",
					"dataType": "Timestamp",
					"description": "Description of the result"
				}
			]
		},
		{
			"evaluatorId": "Cloudtrail",
			"queryId": "LW_Global2_...",
			"queryText": "Query...",
			"owner": "user@example.com",
			"lastUpdateTime": "2020-12-16T16:43:37.915Z",
			"lastUpdateUser": "user@example.com",
			"resultSchema": [
				{
					"name": "EVENT",
					"dataType": "JSON",
					"description": "Description of the result"
				},
				{
					"name": "EVENT_TIME",
					"dataType": "Timestamp",
					"description": "Description of the result"
				}
			]
		}
	]
}

​
Workflow Library Example

List Queries with Lacework and Send Results Via Email

Preview this Workflow on desktop