API Issues

[viri4t0]

I've been trying to retrieve specific events using the query parameter with the Event Search API module, however, when I get the response, it seems that the parameter doesn't work. The response shows many events that have no relation to the query made.
I have checked many "Lucene format" expressions but none have worked.

Also as for the insight module, it returns the first time and the last time a file has been seen, however it seems to be the global date on all symantec platforms. ¿Is there no way to see the first and last time a file was seen within my company only?

[adamli9]

Where do you see the query parameter documented for event-search? That hasn't been implemented yet.

[viri4t0]

Where do you see the query parameter documented for event-search? That hasn't been implemented yet.

Here https://apidocs.securitycloud.symantec.com/#/doc?id=ses_event_search

[adamli9]

This was accidentally published too early. The "query" field is expected to be available next month. We'll correct the documentation. Thanks for letting us know.

[viri4t0]

Thank you very much for the clarification, I look forward to the update