For AI agents: A markdown version of this page is available at https://dnd37xeb23o8n.cloudfront.net/stefon.simmons/docs-astro-web-10435/ja/api/latest/security-monitoring/get-a-jobs-hist-signals.md. A documentation index is available at /llms.txt.
Language
Datadog site

Get a job's hist signals

警告Note: This endpoint is in beta and may be subject to changes. Please check the documentation regularly for updates.
GEThttps://api.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/histsignalshttps://api.us3.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/histsignalshttps://api.us5.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/histsignalshttps://api.datadoghq.eu/api/v2/siem-historical-detections/jobs/{job_id}/histsignalshttps://api.ap1.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/histsignalshttps://api.ap2.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/histsignalshttps://api.uk1.datadoghq.com/api/v2/siem-historical-detections/jobs/{job_id}/histsignalshttps://api.ddog-gov.com/api/v2/siem-historical-detections/jobs/{job_id}/histsignalshttps://api.us2.ddog-gov.com/api/v2/siem-historical-detections/jobs/{job_id}/histsignals

概要

Get a job's hist signals.

This endpoint requires the security_monitoring_signals_read permission.

OAuth apps require the security_monitoring_signals_read authorization scope to access this endpoint.

引数

パスパラメーター

名前
タイプ
説明
job_id [required]
string

The ID of the job.

クエリ文字列

名前
タイプ
説明
filter[query]
string

The search query for security signals.

filter[from]
string

The minimum timestamp for requested security signals.

filter[to]
string

The maximum timestamp for requested security signals.

sort
enum

The order of the security signals in results.

Allowed enum values: timestamp, -timestamp
page[cursor]
string

A list of results using the cursor provided in the previous query.

page[limit]
integer

The maximum number of security signals in the response.

Default: 10

応答

OK

The response object with all security signals matching the request and pagination information.

フィールド
タイプ
説明
data
[object]

An array of security signals matching the request.

links
object

Links attributes.

meta
object

Meta attributes.

コード例

Get a job's hist signals
# Path parameters
export job_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/siem-historical-detections/jobs/${job_id}/histsignals" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Path parameters
export job_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="us3.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/siem-historical-detections/jobs/${job_id}/histsignals" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Path parameters
export job_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="us5.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/siem-historical-detections/jobs/${job_id}/histsignals" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Path parameters
export job_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="datadoghq.eu"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/siem-historical-detections/jobs/${job_id}/histsignals" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Path parameters
export job_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="ap1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/siem-historical-detections/jobs/${job_id}/histsignals" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Path parameters
export job_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="ap2.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/siem-historical-detections/jobs/${job_id}/histsignals" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Path parameters
export job_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="uk1.datadoghq.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/siem-historical-detections/jobs/${job_id}/histsignals" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Path parameters
export job_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/siem-historical-detections/jobs/${job_id}/histsignals" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"
# Path parameters
export job_id="CHANGE_ME"

# Set your Datadog site and credentials
export DD_SITE="us2.ddog-gov.com"
# Use a Personal Access Token or Service Access Token
export DD_BEARER_TOKEN="<PERSONAL_ACCESS_TOKEN OR SERVICE_ACCESS_TOKEN>"

curl -X GET "https://api.${DD_SITE}/api/v2/siem-historical-detections/jobs/${job_id}/histsignals" \
-H "Accept: application/json" \
-H "Authorization: Bearer ${DD_BEARER_TOKEN}"