---
title: "Get Active Queries"
method: GET
path: "/connect/query/active"
tags: ["Query"]
---

# Get Active Queries

`GET /connect/query/active`

Returns a list of active event/data queries within the grid. Users will only see their
queries unless they have privileged access to see active queries across all users.
Requires a Security Onion Pro license.

## Query parameters

- `filter` boolean

## Response `200`

The list of active queries

- ModelQueryTask[]
  - `cancelable` boolean — True if this task can be canceled
  - `details` string — Details of the task
  - `elapsedMs` integer — Elapsed runtime of this task
  - `gridId` string — Grid ID on which this task is running, or empty for the local grid
  - `startTime` string — Start time of this task
  - `taskId` string — Unique Task ID representing this active task

## Other responses

- `401` — Request was not properly authenticated
- `403` — Insufficient permissions for this request
- `500` — Internal SOC error; review SOC logs

---

[API](https://skmtc.net/security-onion-solutions/apis/security-onion-connect-api.md) · [All operations](https://skmtc.net/security-onion-solutions/apis/security-onion-connect-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/security-onion-solutions/security-onion-connect-api/versions/0576ce393f8d/schema)