gnql-timeseries
Retrieve hourly IP records matching a GNQL query for temporal analysis of activity over a specified time range.
Instructions
Retrieve hourly GNQL records for a time range. Enables temporal analysis of IP activity matching any GNQL query (Recall).
Returns IP records bucketed by hour, useful for investigating when specific IPs were active and what they were doing.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | GNQL query string | |
| start_time | No | Start of time range (ISO 8601 format, e.g. 2025-01-15T00:00:00Z) | |
| end_time | No | End of time range (ISO 8601 format) | |
| size | No | Results per hourly bucket (default: 25) |