List agent archive zips

Lists the raw agent archive zip files for one or more sources within a bounded time window. The window between start_time and end_time may not exceed 24 hours; if omitted it defaults to the last hour (end_time = now, start_time = now - 1h).

Results are paginated: when the response includes a non-empty continuation_token, pass it back (with the other parameters unchanged) to fetch the next page.

Each result includes an opaque name that, with its source UID, can be passed to the download endpoint to fetch the zip. The name carries no storage path or prefix.

Requires action source_data:Query on the organization

get/api/v1/org/{orgUID}/archive/

Request

Base URL: https://api.prod.spyderbat.com
URL: https://api.prod.spyderbat.com/api/v1/org/{orgUID}/archive/
Auth: HTTP bearer

Path parameters

orgUIDstring required

Organization UID that owns the archives

Query parameters

continuation_tokenstring

Opaque token from a prior response's continuation_token, to fetch the next page. The other parameters must be unchanged across pages.

end_timeinteger

Inclusive upper bound, in Unix seconds; must be after start_time and within 24h of it. Defaults to the current time.

limitinteger

Maximum number of archives to return in one page. Defaults to 1000.

source_uidstring[] required

One or more source UIDs (e.g. machine UIDs) to list archives for

start_timeinteger

Inclusive lower bound, in Unix seconds, of the time window to list. Defaults to one hour before end_time.

Response

continuation_tokenstring

If present, more archives match; pass it back as continuation_token (with the same other parameters) to fetch the next page

Changes

No recorded changes to this operation across all 1 revision of this API.