Method: legacy.legacySearchCustomerStats

Full name: projects.locations.instances.legacy.legacySearchCustomerStats

legacy.legacySearchCustomerStats gets data collection stats about a customer, e.g., the first time data was seen from a customer, the last time, etc.

HTTP request


Path parameters

Parameters
instance

string

Required. The name of the parent resource, which is the SecOps instance this request is sent to. Format: projects/{project}/locations/{location}/instances/{instance}

Request body

The request body must be empty.

Response body

LegacySearchCustomerStatsResponse contains a given customer's data. NEXT TAG: 7

If successful, the response body contains data with the following structure:

JSON representation 
{
  "companyName": string,
  "oldestAvailableData": string,
  "newestAvailableData": string,
  "advancedSearchStartTimestamp": string,
  "yaraL2AvailableTimeRange": {
    object (Interval)
  },
  "maxNormalizationTimestamp": string
}
Fields
companyName

string

Company name to be inserted at the top of the home view.
oldestAvailableData

string (Timestamp format)

Timestamp indicating date of oldest available data.

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
newestAvailableData

string (Timestamp format)

Timestamp indicating date of last collected data.

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
advancedSearchStartTimestamp

string (Timestamp format)

Timestamp indicating earliest start date for advanced search.

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".
yaraL2AvailableTimeRange

object (Interval)

The start time will be the cutoff date for the earliest data available in the semantic data layer. The end time will be the end time of the latest hour bucket that a customer has data for.
maxNormalizationTimestamp

string (Timestamp format)

Timestamp indicating max normalization timestamp.

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the instance resource:

  • chronicle.legacies.legacySearchCustomerStats

For more information, see the IAM documentation.