Full name: projects.locations.instances.legacy.legacyGetDetection
Legacy endpoint for fetching a Detection.
HTTP request
Path parameters
Parameters
instance
string
Required. The name of the parent resource, which is the SecOps instance this request is sent to. Format: projects/{project}/locations/{location}/instances/{instance}
Query parameters
Parameters
ruleId
string
Required. The specific rule revision to get a detection for. There are two acceptable formats: - {ruleId} gets a detection for the latest revision of the Rule with rule ID ruleId - {ruleId}@{revisionId} gets a detection for the Rule revision with rule ID ruleId and revision ID revisionId
detectionId
string
Required. The detection to get.
Request body
The request body must be empty.
Response body
If successful, the response body contains an instance of Collection.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-25 UTC."],[[["\u003cp\u003eThis endpoint, \u003ccode\u003eprojects.locations.instances.legacy.legacyGetDetection\u003c/code\u003e, is used to fetch a specific detection from a Chronicle instance using a GET request.\u003c/p\u003e\n"],["\u003cp\u003eThe request requires two path parameters: \u003ccode\u003einstance\u003c/code\u003e, to specify the Chronicle instance, and two query parameters \u003ccode\u003eruleId\u003c/code\u003e and \u003ccode\u003edetectionId\u003c/code\u003e, to identify the rule and detection.\u003c/p\u003e\n"],["\u003cp\u003eThe request body must be empty for this endpoint.\u003c/p\u003e\n"],["\u003cp\u003eA successful request will return a \u003ccode\u003eCollection\u003c/code\u003e object in the response body.\u003c/p\u003e\n"],["\u003cp\u003eAuthorization requires the \u003ccode\u003ehttps://www.googleapis.com/auth/cloud-platform\u003c/code\u003e OAuth scope and the \u003ccode\u003echronicle.legacies.legacyGetDetection\u003c/code\u003e IAM permission on the instance resource.\u003c/p\u003e\n"]]],[],null,["# Method: legacy.legacyGetDetection\n\n- [HTTP request](#body.HTTP_TEMPLATE)\n- [Path parameters](#body.PATH_PARAMETERS)\n- [Query parameters](#body.QUERY_PARAMETERS)\n- [Request body](#body.request_body)\n- [Response body](#body.response_body)\n- [Authorization scopes](#body.aspect)\n- [IAM Permissions](#body.aspect_1)\n- [Try it!](#try-it)\n\n**Full name**: projects.locations.instances.legacy.legacyGetDetection\n\nLegacy endpoint for fetching a Detection.\n\n### HTTP request\n\nChoose a location: \nafrica-south1 asia-northeast1 asia-south1 asia-southeast1 asia-southeast2 australia-southeast1 europe-west12 europe-west2 europe-west3 europe-west6 europe-west9 me-central1 me-central2 me-west1 northamerica-northeast2 southamerica-east1 us eu \n\n\u003cbr /\u003e\n\n### Path parameters\n\n### Query parameters\n\n### Request body\n\nThe request body must be empty.\n\n### Response body\n\nIf successful, the response body contains an instance of [Collection](/chronicle/docs/reference/rest/v1alpha/Collection).\n\n### Authorization scopes\n\nRequires the following OAuth scope:\n\n- `https://www.googleapis.com/auth/cloud-platform`\n\nFor more information, see the [Authentication Overview](/docs/authentication#authorization-gcp).\n\n### IAM Permissions\n\nRequires the following [IAM](https://cloud.google.com/iam/docs) permission on the `instance` resource:\n\n- `chronicle.legacies.legacyGetDetection`\n\nFor more information, see the [IAM documentation](https://cloud.google.com/iam/docs)."]]
