Method: legacy.legacySearchDomainsTimingStats

Full name: projects.locations.instances.legacy.legacySearchDomainsTimingStats

Given a list of domain names, returns time-related statistics for those domains (ex: the first seen in the enterprise time).

HTTP request


Path parameters



Required. Chronicle instance this request is sent to. Format: projects/{project}/locations/{location}/instances/{instance}

Query parameters



Required. The list of domains we want to get statistics for. At least one domain is required.


string (Timestamp format)

Optional. Cut off timestamp for filtering the response. Only return domains that have first-seen time after this timestamp. If unset or 0, all domains and their first-seen times will be returned.

A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

Request body

The request body must be empty.

Response body

The response to a request for time-related statistics for a given list of domains.

If successful, the response body contains data with the following structure:

JSON representation
  "domain_timing_stats": [
      object (DomainAndTime)

object (DomainAndTime)

A list of domains along with their first-seen-in-the-enterprise time. We may later add more statistics to this API, in which case we would use a new message in the response. No guaranteed order

Authorization scopes

Requires the following OAuth scope:


For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the instance resource:

  • chronicle.legacies.legacySearchDomainsTimingStats

For more information, see the IAM documentation.