Method: legacy.legacyFetchUdmSearchView

{
  "maxReturnedEvents": integer
}

{
  "maxValuesPerField": integer
}

{
  "snapshotQuery": string,
  "detectionList": {
    object (DetectionListOptions)
  },
  "fieldAggregations": {
    object (UdmFieldAggregationsOptions)
  },
  "fetchNonAlertingDetections": boolean
}

{
  "maxReturnedDetections": integer
}

{
  "groupedFields": [
    {
      object (GroupByField)
    }
  ],
  "selectedFields": [
    {
      object (SelectedField)
    }
  ],
  "orders": [
    {
      object (OrderBy)
    }
  ],
  "maxReturnedRows": integer
}

{
  "udmFieldPath": string,
  "toLowerCase": boolean,

  // Union field transformation can be only one of the following:
  "resolutionInNanoSeconds": string,
  "cidrPrefixLengthInBits": integer,
  "topNLevelDomain": integer,
  "getRegisteredDomain": boolean
  // End of list of possible types for union field transformation.
}

{
  "udmFieldPath": string,
  "functionType": enum (FunctionType),
  "percentile": number
}

{
  "fieldIndex": integer,
  "isDescendingOrder": boolean
}

{
  "getPrevalence": boolean,
  "bucketSize": {
    object (UdmSearchAggregationBucketFunction)
  }
}

{
  "resolutionInSeconds": integer
}

{
  "instances": [
    {
      object (InstanceSelection)
    }
  ],
  "federationGroups": [
    {
      object (FederationGroupSelection)
    }
  ]
}

{
  "instance": string
}

{
  "federationGroup": string
}

{
  "events": [
    {
      object (UdmEventInfo)
    }
  ],
  "columnNames": {
    object (ColumnNames)
  },
  "progress": number,
  "tooManyEvents": boolean,
  "complete": boolean,
  "datatableInfo": [
    {
      object (SearchDataTableInfo)
    }
  ],
  "rows": [
    {
      object (ResultRow)
    }
  ]
}

{
  "names": [
    string
  ]
}

{
  "dataTable": string,
  "columnInfo": [
    {
      object (SearchDataTableColumnInfo)
    }
  ]
}

{
  "originalColumn": string,
  "isDefault": boolean
}

{
  "outcomes": [
    {
      object (UdmColumnType)
    }
  ],

  // Union field result can be only one of the following:
  "event": {
    object (EventRecord)
  },
  "entity": {
    object (EntityContextRecord)
  },
  "join": {
    object (JoinRecord)
  }
  // End of list of possible types for union field result.
}

{
  "event": {
    object (UDM)
  },
  "eventLogToken": string,
  "alertNumber": integer,
  "alertViewId": string,
  "annotations": [
    enum (Annotation)
  ],
  "detections": [
    {
      object (Collection)
    }
  ],
  "table": string,
  "tenantId": string
}

{
  "entity": {
    object (Entity)
  },
  "eventLogToken": string,
  "timed": boolean,
  "connectedComponentLabel": string,
  "detections": [
    {
      object (Collection)
    }
  ],
  "table": string,
  "tenantId": string
}

{
  "events": [
    {
      object (EventRecord)
    }
  ],
  "entities": [
    {
      object (EntityContextRecord)
    }
  ]
}

{
  "buckets": [
    {
      object (EventCountTimelineBucket)
    }
  ],
  "sizeOfBucketMs": string
}

{
  "baselineEventCount": integer,
  "eventCount": integer,
  "baselineAlertCount": integer,
  "alertCount": integer,
  "baselineTimedEntityCount": integer,
  "filteredTimedEntityCount": integer,
  "entityChangedCount": {
    object (EntityChangedCountTimelineBucket)
  },
  "joinsResultCount": [
    {
      object (JoinsResultCountTimelineBucket)
    }
  ]
}

{
  "totalChangedEntitiesCount": integer,
  "entityChangedInfo": [
    {
      object (EntityChangedInfo)
    }
  ]
}

{
  "artifacts": {
    object (FieldAndValue)
  },
  "entityCount": integer
}

{
  "value": string,
  "entityNamespace": string,

  // Union field type can be only one of the following:
  "fieldPath": string,
  "kvalueType": enum (KValueType)
  // End of list of possible types for union field type.
}

{
  "tableType": enum (TableType),
  "table": string,
  "baselineCount": integer,
  "filteredCount": integer
}

{
  "fields": [
    {
      object (UdmFieldAggregation)
    }
  ],
  "groupByFields": [
    {
      object (GroupAggregationByField)
    }
  ],
  "complete": boolean
}

{
  "fieldName": string,
  "baselineEventCount": integer,
  "eventCount": integer,
  "tooManyValues": boolean,
  "valueCount": integer,
  "allValues": [
    {
      object (UdmValueCount)
    }
  ],
  "topValues": [
    {
      object (UdmValueCount)
    }
  ],
  "bottomValues": [
    {
      object (UdmValueCount)
    }
  ],
  "aggregationType": enum (UdmFieldAggregationType)
}

{
  "value": {
    object (UdmFieldValue)
  },
  "baselineEventCount": integer,
  "eventCount": integer
}

{

  // Union field value can be only one of the following:
  "stringValue": string,
  "int32Value": integer,
  "uint32Value": integer,
  "int64Value": string,
  "uint64Value": string,
  "floatValue": number,
  "doubleValue": number,
  "enumValue": string,
  "boolValue": boolean,
  "bytesValue": string,
  "isNull": boolean,
  "timestampValue": string
  // End of list of possible types for union field value.
}

{
  "fieldName": string,
  "fieldValue": {
    object (UdmFieldValue)
  },
  "fields": [
    {
      object (UdmFieldAggregation)
    }
  ],
  "baselineEventCount": integer,
  "eventCount": integer,
  "valueCount": integer
}

{
  "detections": [
    {
      object (Collection)
    }
  ],
  "complete": boolean,
  "tooManyDetections": boolean,
  "validSnapshotQuery": boolean,
  "baselineAlertsCount": integer,
  "filteredAlertsCount": integer,
  "detectionFieldAggregations": {
    object (AlertFieldAggregations)
  }
}

{
  "rows": [
    {
      object (FunctionResponseRow)
    }
  ],
  "tooManyRows": boolean
}

{
  "values": [
    {
      object (UdmFieldValue)
    }
  ]
}

{
  "buckets": [
    {
      object (UdmPrevalenceBucket)
    }
  ],
  "partialPrevalence": boolean
}

{
  "prevalence": [
    {
      object (UdmPrevalence)
    }
  ]
}

{
  "artifacts": [
    {
      object (FieldAndValue)
    }
  ],
  "prevalence": integer
}

{
  "results": [
    {
      object (ColumnData)
    }
  ],
  "dataQueryExpression": string,
  "tooManyResults": boolean,
  "totalResults": integer,
  "sortOrder": [
    {
      object (ColumnSort)
    }
  ],
  "hasJoin": boolean
}

{
  "column": string,
  "values": [
    {
      object (ColumnType)
    }
  ],
  "filterable": boolean,
  "filterExpression": string,
  "columnMetadata": {
    object (ColumnMetadata)
  }
}

{

  // Union field type can be only one of the following:
  "value": {
    object (ColumnValue)
  },
  "list": {
    object (List)
  }
  // End of list of possible types for union field type.
}

{

  // Union field value can be only one of the following:
  "nullVal": boolean,
  "boolVal": boolean,
  "bytesVal": string,
  "doubleVal": number,
  "int64Val": string,
  "uint64Val": string,
  "stringVal": string,
  "timestampVal": string,
  "dateVal": {
    object (Date)
  },
  "protoVal": {
    "@type": string,
    field1: ...,
    ...
  }
  // End of list of possible types for union field value.
}

{
  "values": [
    {
      object (ColumnValue)
    }
  ]
}

{
  "column": string,
  "fieldPath": string,
  "functionNameUsed": string,
  "functionModule": string,
  "longitude": boolean,
  "latitude": boolean
}

{
  "name": string,
  "descending": boolean
}

{
  "aiSummary": string,
  "suggestions": [
    {
      object (Action)
    }
  ],
  "complete": boolean
}