Start Auth Events Detail Job

POST {{cb_url}}/api/investigate/v2/orgs/{{cb_org_key}}/auth_events/detail_jobs

Creates an auth events detail job. The details will include information about the event that’s not normally accessible during a search. The results for the search job may be requested using the job ID returned.

RBAC Permissions Required

Permission (.notation name)Operation(s)
org.search.eventsREAD

Request Schema Body

{
  "alert_id": "string",
  "event_ids": [ "string" ]
}

See Documentation about the APIs

Information on Fields

Request Body

{"alert_id"=>"{{cb_alert_id}}", "event_ids"=>["{{cb_event_id}}"]}