Create Queries

Create a FortiCNAPP Query Language (LQL) query by specifying parameters in the request body when invoking the following endpoint:

POST https://YourAccount.lacework.net/api/v2/Queries

This creates the LQL query in your FortiCNAPP instance so you can use it in an LQL custom policy and view it in the FortiCNAPP Console. You can get the unique identifiers for the LQL queries (queryIdList) array by invoking the GET /api/v2/Queries endpoint.

For information on creating queries, including information on specifying data sources, filtering, and returning data with the DISTINCT operator, see LQL Overview.