{"type":"model","meta":{"id":"/apps/pubhub/media/orbital-api/1c9ae58c5602552df6194a1545023fdb0c609c3b/6031b5a0-67fa-3480-bf75-857e24b55963","info":{"description":"Documentation of the Orbital API\n\nTo authenticate:\n\n\nFollow steps 1 through 3 from the SecureX Authorization section of this article to generate a SecureX Token.\nhttps://developer.cisco.com/docs/secure-endpoint/#!authentication\n\n\nclick \"Authorize\" button\nIn \"Value\" - enter token from above, prefixed with \"Bearer \" (no quotes)\nClick \"Authorize\", followed by \"Close\"\n\nNow the \"Try it out\" button can work","title":"Orbital API","version":"0.0.1"},"security":[{"AuthorizationHeader":[]}],"openapi":"3.0.3","servers":[{"description":"North America","url":"https://enterprise.orbital.amp.cisco.com/v0"},{"description":"Asia, Pacific, Japan, and China","url":"https://apjc.orbital.amp.cisco.com/v0"},{"description":"Europe","url":"https://eu.orbital.amp.cisco.com/v0"}],"securitySchemes":{"AuthorizationHeader":{"description":"Ex: Bearer \\\u003ctoken\\\u003e","in":"header","name":"authorization","type":"apiKey"}}},"spec":{"description":"QueryExample provides an example result of evaluating a stock query. This will be used by the UI to present a\ntable of example data that can illustrate the purpose of the query.","properties":{"description":{"description":"Description provides an explanation of the results from this example.","type":"string"},"osquery":{"description":"OSQuery provides an example of the results the user should expect from this query from a single host.","items":{"properties":{"columns":{"description":"Columns labels the columns of values.","items":{"type":"string"},"type":"array"},"error":{"description":"Error indicates there was an error evaluating the query.","type":"string"},"label":{"description":"Label is copied from the OSQuery Label so users can associate this result with the OSQuery that spawned it.","type":"string"},"name":{"description":"Name is copied from the OSQuery Name so users can associate this result with the OSQuery that spawned it.","type":"string"},"secs":{"description":"Seconds counts the number of wall clock seconds it took to run the query.","format":"double","type":"number"},"types":{"description":"Types provides the CTIM observable types for each of the columns in the result table. If types\nare omitted or an empty string, the column should be considered untyped.","items":{"description":"Observable Type\nA Type of Observable is an annotation used to document that the value is one with a specific meaning in the intelligence model.","type":"string","$$ref":"#/components/schemas/Type"},"type":"array"},"values":{"description":"Values contains the results of an OSQuery evaluation, in row, column order, such that the 3rd value of the 2nd row\nis at position 2 * width + 3","items":{"type":"string"},"type":"array"}},"type":"object","$$ref":"#/components/schemas/OSResult"},"type":"array"},"title":{"description":"Title is a descriptive title for the example.","type":"string"}},"type":"object","$$ref":"#/components/schemas/QueryExample","title":"QueryExample"}}