---
title: "Start hunt job"
method: POST
path: "/v0/hunt-jobs"
tags: ["Hunt Jobs"]
---

# Start hunt job

`POST /v0/hunt-jobs`

Start a hunt job

## Request body

- StartHuntJobInput
  - `name` string, nullable — Name of the hunt job.
  - `private` boolean — Restrict hunt job visibility to admins only.
  - `range_end_time` string, date-time, required — Exclusive end datetime of the hunt job, in UTC using the ISO 8601 format (e.g., '2021-03-14T15:09:26Z').
  - `range_start_time` string, date-time, required — Inclusive start datetime of the hunt job, in UTC using the ISO 8601 format (e.g., '2021-03-14T15:09:26Z').
  - `source` string, required — MQL source of the hunt job.
  - `triage_email_bomb` boolean — Pre-filters to only include messages that are contained in an email bomb. Combined with triage_reported, triage_flagged, and triage_dlp_rule_matched with a logical OR.
  - `triage_flagged` boolean — Pre-filters to only includes flagged messages. Combined with triage_reported, triage_email_bomb, and triage_dlp_rule_matched with a logical OR.
  - `triage_reported` boolean — Pre-filters to only includes user-reported messages. Combined with triage_flagged, triage_email_bomb, and triage_dlp_rule_matched with a logical OR.

## Response `201`

Created

- HandlersStartHuntJobResponse
  - `hunt_job_id` string — ID of the started hunt job.

---

[API](https://skmtc.net/sublime/apis/sublime-platform-api.md) · [All operations](https://skmtc.net/sublime/apis/sublime-platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/sublime/sublime-platform-api/versions/d5df82850357/schema)