Get Auth Events Search Validation
GET {{cb_url}}/api/investigate/v2/orgs/{{cb_org_key}}/auth_events/search_validation?q="(auth_username:Administrator)AND(device_name:test)"
Returns the validation status of a given Auth Events query and potentially provides validation on how to fix invalid queries.
RBAC Permissions Required
| Permission (.notation name) | Operation(s) |
|---|---|
| org.search.events | READ |
See Documentation about the APIs
Request Params
| Key | Datatype | Required | Description |
|---|---|---|---|
q | string | The query to validate |
RESPONSES
status: OK
{"valid":true,"value_search_query":true}