SUsublime
Message Groups

Hunt message groups

DEPRECATED: Hunt using MQL to find message groups. Please use the POST /v0/hunt-jobs endpoint instead.

post/v0/message-groups/hunt

Request

  • Base URL
    https://platform.sublime.security
  • URL
    https://platform.sublime.security/v0/message-groups/hunt
  • Auth
    HTTP bearer

Request body

created_at[gte]string date-time nullable

Inclusive start datetime filter for search, in UTC using the ISO 8601 format (e.g., '2021-03-14T15:09:26Z'). Only message groups with a message processed at or after this time will be returned.

created_at[lt]string date-time nullable

Exclusive end datetime filter for search, in UTC using the ISO 8601 format (e.g., '2021-05-04T15:09:26Z'). Only message groups with a message processed before this time will be returned.

privateboolean

Restrict hunt visibility to admin-only

sourcestring required

Source of MQL to hunt with

Response

OK

task_idstring uuid required

Task ID. Use the /v0/tasks/:id endpoint to check the task status.

Changes

No recorded changes to this operation across all 2 revisions of this API.