Method: legacy.legacySearchDomainsTimingStats

Full name: projects.locations.instances.legacy.legacySearchDomainsTimingStats

Given a list of ___domain names, returns time-related statistics for those domains (ex: the first seen in the enterprise time).

HTTP request

GET https://chronicle.googleapis.com/v1alpha/{instance}/legacy:legacySearchDomainsTimingStats

Path parameters

Parameters
instance

string

Required. Chronicle instance this request is sent to. Format: projects/{project}/locations/{___location}/instances/{instance}

Query parameters

Parameters
domains[]

string

Required. The list of domains we want to get statistics for. At least one ___domain is required.
endTimestamp

string (Timestamp format)

Optional. Cut off timestamp for filtering the response. Only return domains that have first-seen time after this timestamp. If unset or 0, all domains and their first-seen times will be returned.

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".

Request body

The request body must be empty.

Response body

The response to a request for time-related statistics for a given list of domains.

If successful, the response body contains data with the following structure:

JSON representation 
{
  "domain_timing_stats": [
    {
      object (DomainAndTime)
    }
  ]
}
Fields
domain_timing_stats[]

object (DomainAndTime)

A list of domains along with their first-seen-in-the-enterprise time. We may later add more statistics to this API, in which case we would use a new message in the response. No guaranteed order

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the instance resource:

  • chronicle.legacies.legacySearchDomainsTimingStats

For more information, see the IAM documentation.