Queries
Execute Queries by ID
Run an existing LQL query registered in your FortiCNAPP instance by invoking the following endpoint:
POST https://YourAccount.lacework.net/api/v2/Queries/{queryId}/execute
Replace {queryId} with the queryId value returned for an LQL query in the response when the GET /api/v2/Queries endpoint is invoked. The response is the data that the query finds in the datasource for the specified time period. For an example of how to specify a time frame, see Example Queries.
post/api/v2/Queries/{queryId}/execute
Path parameters
queryIdstring required
Identifier of the query that executes while running the policy.
Headers
Authorizationstring required
Bearer Access Token. For example, "Bearer {YourAPIToken}"
Content-Typestring required
application/json
Request body
Response
No Error