GNQL Timeseries
gnql-timeseriesRetrieve hourly IP records matching a GNQL query over a specified time range. Analyze when IPs were active and their activities.
Instructions
Retrieve hourly GNQL records for a time range. Enables temporal analysis of IP activity matching any GNQL query (Recall).
Returns IP records bucketed by hour, useful for investigating when specific IPs were active and what they were doing.
Time bounds use ISO 8601 (e.g. 2025-01-15T00:00:00Z). size is results per hourly bucket (default: 25, max: 10000).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| size | No | Results per hourly bucket (default: 25) | |
| query | Yes | GNQL query string | |
| end_time | No | End of time range (ISO 8601 format) | |
| start_time | No | Start of time range (ISO 8601 format, e.g. 2025-01-15T00:00:00Z) |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| buckets | Yes |