Skip to content
Start here

Analytics Query

Query analytics summary
client.analyticsQuery.summary(stringdataset, AnalyticsQuerySummaryParams { account_id, filters, from, 3 more } params, RequestOptionsoptions?): AnalyticsQuerySummaryResponse { currentTotal, previousTotal }
POST/accounts/{account_id}/analytics/query/{dataset}/summary
Query analytics timeseries
client.analyticsQuery.timeseries(stringdataset, AnalyticsQueryTimeseriesParams { account_id, filters, from, 4 more } params, RequestOptionsoptions?): AnalyticsQueryTimeseriesResponse { resolution, slots }
POST/accounts/{account_id}/analytics/query/{dataset}/timeseries
Query analytics top-N
client.analyticsQuery.topN(stringdataset, AnalyticsQueryTopNParams { account_id, filters, from, 5 more } params, RequestOptionsoptions?): SinglePage<AnalyticsQueryTopNResponse>
POST/accounts/{account_id}/analytics/query/{dataset}/top-n
ModelsExpand Collapse
AnalyticsQuerySummaryResponse { currentTotal, previousTotal }
currentTotal: Array<Record<string, unknown>>

Aggregated stats for the requested time range.

previousTotal: Array<Record<string, unknown>>

Aggregated stats for the equivalent preceding time range, for trend comparison.

AnalyticsQueryTimeseriesResponse { resolution, slots }
resolution: string

The resolution used for time bucketing.

slots: Array<Record<string, unknown>>

Time-bucketed result rows. Each slot contains a time_bucket field plus the requested stats and group-by dimensions.

AnalyticsQueryTopNResponse = Record<string, unknown>

Maps field names to values. Keys represent stat names and group-by column names. Values depend on the dataset (strings, numbers, booleans).

Analytics QueryData Security

Analytics QueryData SecurityContent Findings

Top integrations by content findings
client.analyticsQuery.dataSecurity.contentFindings.topN(ContentFindingTopNParams { account_id, filters, from, 2 more } params, RequestOptionsoptions?): SinglePage<ContentFindingTopNResponse>
POST/accounts/{account_id}/analytics/query/data-security/content-findings/top-n
ModelsExpand Collapse
ContentFindingTopNResponse = Record<string, unknown>

Maps field names to values. Keys represent stat names and group-by column names. Values depend on the dataset (strings, numbers, booleans).

Analytics QueryData SecurityFindings

Data security findings summary
client.analyticsQuery.dataSecurity.findings.summary(FindingSummaryParams { account_id, filters, from, to } params, RequestOptionsoptions?): FindingSummaryResponse { currentTotal, previousTotal }
POST/accounts/{account_id}/analytics/query/data-security/findings/summary
Data security findings timeseries
client.analyticsQuery.dataSecurity.findings.timeseries(FindingTimeseriesParams { account_id, filters, from, to } params, RequestOptionsoptions?): FindingTimeseriesResponse { slots, resolution }
POST/accounts/{account_id}/analytics/query/data-security/findings/timeseries
ModelsExpand Collapse
FindingSummaryResponse { currentTotal, previousTotal }
currentTotal: Array<Record<string, unknown>>

Aggregated stats for the requested time range.

previousTotal: Array<Record<string, unknown>>

Aggregated stats for the equivalent preceding time range, for trend comparison.

FindingTimeseriesResponse { slots, resolution }

Merged CASB and CDE findings timeseries result.

slots: Array<Record<string, unknown>>

Contains time-bucketed result rows. Each slot includes a timestamp plus content and posture maps with cloud and saas keys.

resolution?: string | null

Always null for this endpoint.