zins_get_cyber_incidents_by_location
Get cybersecurity incidents grouped by location, showing distribution across offices and sites. Customize time range and grouping for detailed analysis.
Instructions
Provides cybersecurity incidents grouped by location, showing incident distribution across offices and sites.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| start_days_ago | No | Days ago for start. Default: 16 (14-day interval with end=2). API requires intervals of exactly 7 or 14 days. | |
| end_days_ago | No | Days ago for end. Default: 2. Interval = start - end must be 7 or 14. | |
| start_time | No | ALTERNATIVE: Start time as Unix epoch in MILLISECONDS. | |
| end_time | No | ALTERNATIVE: End time as Unix epoch in MILLISECONDS. | |
| categorize_by | No | Category to group incidents by. Values: LOCATION_ID (default), APP_ID, USER_ID, DEPARTMENT_ID | LOCATION_ID |
| limit | No | Maximum number of entries to return (1-1000). |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |