---
title: "Query Evidence"
method: GET
path: "/api/evidence/query"
tags: ["Turbinia Evidence"]
---

# Query Evidence

`GET /api/evidence/query`

Queries evidence in Redis that have the specified attribute value.

Args:
  attribute_name (str): Name of attribute to be queried.
  attribute_value (str): Value the attribute must have.
  output Optional(str): Sets how the evidence found will be output.

Returns:
  summary (dict): Summary of all evidences and their content.

Raises:
  HTTPException: If no matching evidence is found.

## Query parameters

- `attribute_name` '_name' | 'cloud_only' | 'context_dependent' | 'copyable' | 'creation_time' | 'description' | 'has_child_evidence' | 'last_update' | 'local_path' | 'mount_path' | 'parent_evidence' | 'request_id' | 'resource_id' | 'resource_tracked' | 'save_metadata' | 'saved_path' | 'saved_path_type' | 'size' | 'source' | 'source_path' | 'type' | 'tasks'
- `attribute_value` string, required
- `output` 'keys' | 'content' | 'count'

## Response `200`

Successful Response

- unknown

## Other responses

- `422` — Validation Error

## Changes

> 12 revisions in range; 1 could not be searched.

- **2023-09-01** `a7f1f9e6443d` — 1 info
  - endpoint added
- **2022-08-29** `c6a8784c5202` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/google/apis/turbinia-api-server/changes/api/evidence/query/get.md)

---

[API](https://skmtc.dev/google/apis/turbinia-api-server.md) · [All operations](https://skmtc.dev/google/apis/turbinia-api-server/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/google/turbinia-api-server/revisions/207d6275cb53/schema)