Skip to content
Start here

Analytics Query

Query analytics summary
analytics_query.summary(strdataset, AnalyticsQuerySummaryParams**kwargs) -> AnalyticsQuerySummaryResponse
POST/accounts/{account_id}/analytics/query/{dataset}/summary
Query analytics timeseries
analytics_query.timeseries(strdataset, AnalyticsQueryTimeseriesParams**kwargs) -> AnalyticsQueryTimeseriesResponse
POST/accounts/{account_id}/analytics/query/{dataset}/timeseries
Query analytics top-N
analytics_query.top_n(strdataset, AnalyticsQueryTopNParams**kwargs) -> SyncSinglePage[AnalyticsQueryTopNResponse]
POST/accounts/{account_id}/analytics/query/{dataset}/top-n
ModelsExpand Collapse
class AnalyticsQuerySummaryResponse:
current_total: List[Dict[str, object]]

Aggregated stats for the requested time range.

previous_total: List[Dict[str, object]]

Aggregated stats for the equivalent preceding time range, for trend comparison.

class AnalyticsQueryTimeseriesResponse:
resolution: str

The resolution used for time bucketing.

slots: List[Dict[str, object]]

Time-bucketed result rows. Each slot contains a time_bucket field plus the requested stats and group-by dimensions.

Dict[str, object]

Maps field names to values. Keys represent stat names and group-by column names. Values depend on the dataset (strings, numbers, booleans).

Analytics QueryData Security

Analytics QueryData SecurityContent Findings

Top integrations by content findings
analytics_query.data_security.content_findings.top_n(ContentFindingTopNParams**kwargs) -> SyncSinglePage[ContentFindingTopNResponse]
POST/accounts/{account_id}/analytics/query/data-security/content-findings/top-n
ModelsExpand Collapse
Dict[str, object]

Maps field names to values. Keys represent stat names and group-by column names. Values depend on the dataset (strings, numbers, booleans).

Analytics QueryData SecurityFindings

Data security findings summary
analytics_query.data_security.findings.summary(FindingSummaryParams**kwargs) -> FindingSummaryResponse
POST/accounts/{account_id}/analytics/query/data-security/findings/summary
Data security findings timeseries
analytics_query.data_security.findings.timeseries(FindingTimeseriesParams**kwargs) -> FindingTimeseriesResponse
POST/accounts/{account_id}/analytics/query/data-security/findings/timeseries
ModelsExpand Collapse
class FindingSummaryResponse:
current_total: List[Dict[str, object]]

Aggregated stats for the requested time range.

previous_total: List[Dict[str, object]]

Aggregated stats for the equivalent preceding time range, for trend comparison.

class FindingTimeseriesResponse:

Merged CASB and CDE findings timeseries result.

slots: List[Dict[str, object]]

Contains time-bucketed result rows. Each slot includes a timestamp plus content and posture maps with cloud and saas keys.

resolution: Optional[str]

Always null for this endpoint.