{"type":"api","title":"Query findings","meta":{"id":"/apps/pubhub/media/cisco-xdr-api-docs/f4e065ff5977829c89df289df08411f83205f526/c863f2ae-5ca3-3d27-9fd9-e536d4b0ebeb","info":{"title":"XDR Query Service API","version":"1.0.0"},"x-parser-conf":{"serverConfig":"select","overview":{"markdownPath":"reference/findings-query/overview.md","uri":"findings-query-api-guide"},"disableAuthEditing":true,"exampleAsDefault":true,"oAuth2":{"clientId":"client-546e34fc-c6bf-4951-ac69-f6d7987a7814","clientSecret":"MYw4_E_tBdFwUwrX6WFYKVD5LQrG2k7XrJ5J046wWE0s1gAKCxJ8VA","proxyEnabled":false},"meta":{"useProxy":true}},"openapi":"3.1.0","servers":[{"url":"https://queryservice.us.security.cisco.com"}],"securitySchemes":{"bearer":{"bearerFormat":"JWT","scheme":"bearer","type":"http"}}},"spec":{"description":"Query findings in data lake by finding UID","operationId":"get_finding","parameters":[{"description":"The finding UID to query","explode":false,"in":"query","name":"finding_uid","required":true,"schema":{"description":"The finding UID to query","type":"string"}},{"description":"The format to return the data in","explode":false,"in":"query","name":"format","schema":{"default":"ocsf1.4","description":"The format to return the data in","enum":["ocsf1.4"],"type":"string"}}],"responses":{"200":{"content":{"application/json":{"schema":{"description":"The finding response","additionalProperties":false,"properties":{"error":{"description":"The error message, if any, which may not indicate a failed request","type":"string"},"result":{"additionalProperties":{},"description":"The finding result","type":"object"}},"type":"object","$$ref":"#/components/schemas/GetFindingByUIDResponseBody"}}},"description":"OK"},"default":{"content":{"application/json":{"schema":{"additionalProperties":false,"properties":{"details":{"items":{"type":"string"},"type":["array","null"]},"message":{"type":"string"},"status":{"format":"int64","type":"integer"}},"required":["status","message"],"type":"object","$$ref":"#/components/schemas/DataServiceError"}}},"description":"Error"}},"security":[{"bearer":[]}],"summary":"Query findings","tags":["Findings"],"__originalOperationId":"get-finding","method":"get","path":"/api/v1/query/findings"}}