PUT Saved Query

PUT Saved Query


Request used to replace the attributes for a specific Saved Query

URL

https://REGION.rest.logs.insight.rapid7.com/query/saved_queries

REGION is the data center for your account - e.g. "us" or "eu"

Method

PUT

Authentication

Read/Write key or above is required.

URL Params

queryid=[UUID] Example Value: de305d54-75b4-431b-adb2-eb6b9e546014

Data Params

json
1
{
2
"saved_query": {
3
"logs": [],
4
"leql": {
5
"during": {
6
"to": null,
7
"from": null,
8
"time_range": null
9
},
10
"statement": "where(foo=bar)"
11
},
12
"name": "MySearch"
13
}

Success Response

Code 200Content:

json
1
{
2
"saved_query": {
3
"id": "245ff892-ffed-4e99-9ee1-ab99fb20f2fc",
4
"logs": [],
5
"leql": {
6
"during": {
7
"to": null,
8
"from": null,
9
"time_range": null
10
},
11
"statement": "where(foo=bar)"
12
},
13
"name": "MySearch"
14
}
15
}

Error Response

  • 404 if saved query is not found
  • 400 if search name is invalid. Validation: 1-32 chars in length
  • 400 if LEQL query is invalid. Validation: 1-1024 chars in length

Notes

  • Full object must be used when performing this request otherwise it will fail.