SearchResult

JSON representation

Search result parse from the NetworkEvent, passed back to the client from LeagacySearchAssetEvents.

JSON representation

JSON representation
{ "eventTime" : string , "domain" : string , "chip" : { object ( `Chip` ) } , "httpDetails" : [ { object ( `HttpDetails` ) } ] , "resolvedIpAddresses" : [ string ] , "customerPrevalence" : integer , "filterProperties" : { object ( `FilterProperties` ) } , "rawLogsToken" : string , "sidebarEntries" : [ { object ( `SidebarEntry` ) } ] , "assetIndicator" : { object ( `AssetIndicator` ) } }

 { 
 "eventTime" 
 : 
 string 
 , 
 "domain" 
 : 
 string 
 , 
 "chip" 
 : 
 { 
 object (  Chip 
 
) 
 } 
 , 
 "httpDetails" 
 : 
 [ 
 { 
 object (  HttpDetails 
 
) 
 } 
 ] 
 , 
 "resolvedIpAddresses" 
 : 
 [ 
 string 
 ] 
 , 
 "customerPrevalence" 
 : 
 integer 
 , 
 "filterProperties" 
 : 
 { 
 object (  FilterProperties 
 
) 
 } 
 , 
 "rawLogsToken" 
 : 
 string 
 , 
 "sidebarEntries" 
 : 
 [ 
 { 
 object (  SidebarEntry 
 
) 
 } 
 ] 
 , 
 "assetIndicator" 
 : 
 { 
 object (  AssetIndicator 
 
) 
 } 
 }

Fields
`eventTime`	`string ( Timestamp format)` Date/time of lookup (i.e. not the time that the event was ingested). Uses RFC 3339, where generated output will always be Z-normalized and use 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: `"2014-10-02T15:01:23Z"` , `"2014-10-02T15:01:23.045123456Z"` or `"2014-10-02T15:01:23+05:30"` .
`domain`	`string` Domain name looked up (i.e. "foo.bad-actor.com" or "foocompany.com").
`chip`	`object ( Chip )` The chip to display.
`httpDetails[]`	`object ( HttpDetails )` Additional details about HTTP requests associated with this lookup.
`resolvedIpAddresses[]`	`string` Either IPv4 or IPv6 results. Limited to a max of 5 results. We may want to annotate them with badges if the IPs are in a known IP space (CDN, AWS, Google Cloud, Rackspace, etc).
`customerPrevalence`	`integer` The prevalence of the domain within the customer's environment, defined for v1 as the number of unique assets per day looking up the domain name over the trailing 10 days.
`filterProperties`	`object ( FilterProperties )` A list of filter properties associated the event.
`rawLogsToken`	`string` A token to request raw logs, this is opaque to the client. If empty, no raw logs can be requested.
`sidebarEntries[]`	`object ( SidebarEntry )` All the sidebar entries.
`assetIndicator`	`object ( AssetIndicator )` AssetIndicator used for pivoting.