Run Dv Query
run_dv_queryExecute raw Deep Visibility S1QL queries to retrieve matching endpoint events, handling initialization, polling, and result retrieval for security investigations.
Instructions
Run a raw Deep Visibility S1QL query (init → poll → events). Example: storyline = "ABC123" AND event.type = "Process Creation".
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| query | Yes | ||
| tenant | No | ||
| to_date | No | ||
| from_date | No | ||
| timeout_seconds | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||