hec_search_emails
Search emails and SaaS entities in Checkpoint Harmony Email. Filter by sender, recipient, subject, SaaS platform, date range, and use extended attribute filters for precise matching.
Instructions
Search email and SaaS entities in Checkpoint Harmony Email. Filter by sender, recipient, subject, SaaS platform, and date range. Use extended filters for precise attribute matching (contains, startsWith, isEmpty, etc.).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| saas | Yes | SaaS platform to search (required). E.g. office365_emails, google_mail. | |
| endDate | No | End date for the search (ISO 8601). | |
| filters | No | Attribute filters. Each filter has saasAttrName, saasAttrOp, and saasAttrValue. | |
| scrollId | No | Scroll ID for pagination | |
| startDate | Yes | Start date for the search (ISO 8601, required). | |
| saasEntity | No | SaaS entity type filter (optional). |