Get Auth Events Detail Job Results
GET {{cb_url}}/api/investigate/v2/orgs/{{cb_org_key}}/auth_events/facet_jobs/{{cb_job_id}}/results?limit=
Retrieves the auth event facet results for a given job_id.
Results may be available immediately but will be complete once the job finishes, as this call is asynchronous. The job will be complete when contacted == completed in the response.
Results may be available immediately but will be complete once the job finishes, as this call is asynchronous. The job will be complete when contacted == completed in the response.
RBAC Permissions Required
| Permission (.notation name) | Operation(s) |
|---|---|
| org.search.events | READ, CREATE |
See Documentation about the APIs
Request Params
| Key | Datatype | Required | Description |
|---|---|---|---|
limit | null | Maximum number of facets per category |
RESPONSES
status: OK
"{\n \"ranges\": [],\n \"terms\": [\n {\n \"values\": [\n {\n \"total\": 26,\n \"id\": \"CBAWTD\",\n \"name\": \"CBAWTD\"\n }\n ],\n \"field\": \"auth_domain_name\"\n },\n {\n \"values\": [\n {\n \"total\": 21,\n \"id\": \"true\",\n \"name\": \"true\"\n }\n ],\n \"field\": \"auth_interactive_logon\"\n },\n ... truncated ... \n \"num_found\": 26,\n \"contacted\": 9,\n \"completed\": 9\n}"