LEleakradar
Raw Search

Count matching raw blocks (mass-unlock cost estimate)

Changed on

Return how many raw blocks match the given filters, i.e. the maximum number of parts (1 point each) a mass unlock would consume. Uses the same payload as /search/raw so the count matches exactly what search and unlock traverse.

This is intended to be called on demand (e.g. when opening the mass-unlock dialog), NOT on every search: the count is heavier than a page fetch and is cached.

  • exact=true: total is the exact count.
  • exact=false: total is an upper bound (q_exact and/or dedup shrink the real set).
  • capped=true: the count hit its upper limit, so total is a lower bound.

Rate limit: shares the raw search limit, including its concurrent-request slot: a count fans out over every shard of the raw index, so it is billed against the same budget as /search/raw rather than the wider generic search limit.

post/search/raw/count

Request

Query parameters

dedupboolean

Mark the count as an upper bound because the deduplicated view folds identical content (block_fp64) app-side.

Request body

qstring nullable

Optional full text query to match within raw blocks. Quotes are ignored for the length check. When omitted or empty, you must provide at least one filter among container_id, exts, categories, file_name.

container_idinteger nullable

Restrict the search to a specific container id.

extsstring[] nullable

List of file extensions to include (case-insensitive, without leading dot).

exts_notstring[] nullable

List of file extensions to exclude (case-insensitive, without leading dot).

categoriesstring[] nullable

Filter results by raw file category. Applied after the search query.

categories_notstring[] nullable

Exclude these raw file categories. Applied after the search query.

file_namestring[] nullable

Case-insensitive wildcards that must match the entry name (OR by default, AND if force_and=true).

file_name_notstring[] nullable

Case-insensitive wildcards that must NOT match the entry name.

folder_namestring[] nullable

Case-insensitive match on the folder holding the block (OR by default, AND if force_and=true). By default the value must appear anywhere in the folder path; with folder_name_exact=true it must be a whole folder at any depth. Leading and trailing slashes are ignored.

folder_name_notstring[] nullable

Folders to exclude, same matching rules as folder_name. Not a standalone selector: a search using only folder_name_not is rejected, provide q or another positive filter.

force_andboolean nullable

When true, require all file_name values to match, and all folder_name values to match (AND instead of OR within each list).

file_name_match_type'contains' | 'starts_with' | 'ends_with' | 'exact'

How a raw file-name or folder value is matched.

Separate from AdvancedTextMatchType on purpose: raw has an EXACT mode the stealer fields do not, and adding it there would widen a contract that seven surfaces already depend on.

file_name_not_match_type'contains' | 'starts_with' | 'ends_with' | 'exact'

How a raw file-name or folder value is matched.

Separate from AdvancedTextMatchType on purpose: raw has an EXACT mode the stealer fields do not, and adding it there would widen a contract that seven surfaces already depend on.

folder_name_match_type'contains' | 'starts_with' | 'ends_with' | 'exact'

How a raw file-name or folder value is matched.

Separate from AdvancedTextMatchType on purpose: raw has an EXACT mode the stealer fields do not, and adding it there would widen a contract that seven surfaces already depend on.

folder_name_not_match_type'contains' | 'starts_with' | 'ends_with' | 'exact'

How a raw file-name or folder value is matched.

Separate from AdvancedTextMatchType on purpose: raw has an EXACT mode the stealer fields do not, and adding it there would widen a contract that seven surfaces already depend on.

file_name_exactboolean nullable

Deprecated, use file_name_match_type and file_name_not_match_type. When true and neither is given, both file_name and file_name_not are matched as exact.

folder_name_exactboolean nullable

Deprecated, use folder_name_match_type and folder_name_not_match_type. When true and neither is given, both folder_name and folder_name_not are matched as exact.

q_exactboolean nullable

When true, the q term must match on word boundaries: '4.4.4.4' will not match '4.4.4.400'. Applied as a content post-filter (no effect without q).

include_termsstring[] nullable

Extra content terms that must ALL be present, on top of q: a block is kept only if its content contains q AND every term listed here (substring, case-insensitive). Min 4 characters per term, max 20 terms. Unlike exclude_terms this IS a positive selector, so it can be used without q.

exclude_termsstring[] nullable

Content terms to exclude: any block whose content contains one of these (substring, case-insensitive) is removed from the results. Min 4 characters per term, max 20 terms. Not a standalone selector: a search using only exclude_terms is rejected, provide q or another positive filter.

ingested_at_minstring date-time nullable

Filter results ingested on or after this datetime (inclusive).

ingested_at_maxstring date-time nullable

Filter results ingested on or before this datetime (inclusive).

Example request

{
  "q": "example.com"
}

Response

Count computed successfully.

totalinteger required

Number of matching raw blocks for the same filters as /search/raw. This is the maximum number of parts (and, at 1 point per part, the maximum points) a mass unlock would consume. It counts all matches, including any the caller already unlocked (those are not re-charged), so treat it as an upper bound on cost.

exactboolean required

True when total is the exact match count. False when it is only an upper bound: q_exact (word-boundary post-filter) or dedup (app-side fold) shrink the real set.

cappedboolean

True if the count reached its upper limit; total is then a lower bound ("at least").

blacklisted_valuestring nullable

If a filter value matched a blacklist entry, the matched value (total is 0).

Changes

  • 2a4d24c5f38dRevision changes
    • info

      added the new optional request property

  • eb219e94d077Revision changes
    • info

      added the new optional request property

    • info

      added the new optional request property

    • info

      added the new optional request property

    • info

      added the new optional request property