- Print
- DarkLight
Article summary
Did you find this summary helpful?
Thank you for your feedback
Post
/insight/{oid}/object_usage/{objType}
Retrieve summarized usage for a specific object / indicator using Insight.
Security
HTTP
Type bearer
Path parameters
oid
stringRequired
organization id
objType
stringRequired
type of object, one of: user, domain, ip, file_hash, file_path, file_name, service_name, package_name
Query parameters
name
stringRequired
name of the object to look for
case_sensitive
string
set to 'false' to disable case sensitivity
is_compressed
string
set to 'true' to enable compression, data returned 'events' is base64(gzip(data))
start
integer
required timestamp in seconds where to begin
end
integer
required timestamp in seconds where to stop
Responses
200
successful operation
401
Access token is missing or invalid
Was this article helpful?