> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Search Events

Search events.

<Note>
  External Documentation

  To learn more, visit the [MISP documentation](https://www.misp-project.org/openapi/#tag/Events/operation/searchEvents).
</Note>

## Basic Parameters

<div className="integrations-table">
  | Parameter    | Description                                                                                                   |
  | ------------ | ------------------------------------------------------------------------------------------------------------- |
  | Attribute    | Filter events matching the given string with attributes values.                                               |
  | Direction    | Direction of the sort.                                                                                        |
  | Email        | Filter events by matching the event creator user email.                                                       |
  | Event ID     | The ID of the event. Must be equal or under 10 characters.                                                    |
  | Minimal      | Returns a minimal version of the event. <br />`Note`: only events with `attributeCount` > 0 will be returned. |
  | Organisation | Filter events by matching the creator organisation name.                                                      |
  | Sort         | Field to be used to sort the result.                                                                          |
  | Threat Level | Represents the threat level.                                                                                  |
</div>

## Advanced Parameters

<div className="integrations-table">
  | Parameter               | Description                                                                                         |
  | ----------------------- | --------------------------------------------------------------------------------------------------- |
  | Analysis State          | Represents the threat level.                                                                        |
  | Distribution            | Who will be able to see this event once it becomes published and eventually when it becomes pulled. |
  | Event Info              | Filter events by matching the event info text.                                                      |
  | From Date               | Returns events that in which creation date is greater or equal.                                     |
  | Has Proposal            | Filter events by checking if it has attributes with change proposals.                               |
  | Limit                   | Limit search filter. Must be greater or equal to 0.                                                 |
  | Page                    | Page number. Must be greater or equal to 1.                                                         |
  | Search Date From        | Filter attributes in which creation date is greater or equal.                                       |
  | Search Date Until.      | Filter attributes that in which creation date is less or equal.                                     |
  | Sharing Group ID        | The sharing group of the events. Must be equal or under 10 characters.                              |
  | Start Publish Timestamp | Event publish timestamp greater or equal.                                                           |
  | Start Timestamp         | Event timestamp greater or equal.                                                                   |
  | Tag                     | The tag of the events. Must be equal or under 255 characters.                                       |
  | Tags                    | Filter events by matching any of the event tags of a given list of tag names.                       |
  | Until date              | Returns events that in which creation date is less or equal.                                        |
</div>

## Example Output

```json theme={"dark"}
[
	{
		"id": "<string>",
		"org_id": "<string>",
		"date": "2021-11-14",
		"info": "<string>",
		"uuid": "<string>",
		"published": false,
		"analysis": "<string>",
		"attribute_count": "<string>",
		"orgc_id": "<string>",
		"timestamp": "<string>",
		"distribution": "<string>",
		"sharing_group_id": "<string>",
		"proposal_email_lock": false,
		"locked": false,
		"threat_level_id": "<string>",
		"publish_timestamp": "<string>",
		"sighting_timestamp": "<string>",
		"disable_correlation": false,
		"extends_uuid": "<string>",
		"protected": null,
		"Org": {
			"id": "<string>",
			"name": "<string>",
			"uuid": "<string>"
		},
		"Orgc": {
			"id": "<string>",
			"name": "<string>",
			"uuid": "<string>"
		},
		"EventTag": []
	}
]
```

## Workflow Library Example

[Search Events with Misp and Send Results Via Email](https://library.blinkops.com/workflows/search-events-with-misp-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/search-events-with-misp-and-send-results-via-email/canvas" />
</div>