Search Lookup Data
Search for lookup data.
Parameters
Parameter | Description |
---|---|
Collection Type | The collection type to query data for. |
Query | The query data to search for. For each collection type there will be a different set of queries. For example: For the asset collection type, the query will look like the following - `entityname = "QUALYSTEST |
Example Output
{
"available": "false",
"error": "false",
"events": [{
"directImport": "false",
"hour": "0",
"ignored": "false",
"invalid": "false",
"invalidEventAction": "0",
"tenantid": "1",
"tenantname": "Securonix",
"u_id": "-1",
"u_userid": "-1",
"result": {
"entry": [{
"key": "value_u_customfield4",
"value": "allows attackers to obtain sensitive information"
},
{
"key": "value_u_customfield11",
"value": "CVE-2014-2212"
},
{
"key": "lookupname",
"value": "VulnerableHostLookUpTable"
},
{
"key": "key",
"value": "WW9452"
}
]
}
}]
"from": "1533838272825",
"offset": "1000",
"query": "index=lookup and lookupname = \"VulnerableHostLookUpTable\"",
"searchViolations": "false",
"to": "1536516672825",
"totalDocuments": "1"
}
Workflow Library Example
Search Lookup Data with Securonix and Send Results Via Email