Connectors
...
Actions
List All Saved Queries
4 min
description retrieve all saved queries from rapid7 insightidr for analysis or investigation purposes endpoint url /log search/query/saved queries method get output example \[ { "status code" 200, "response headers" { "date" "fri, 21 jun 2024 09 00 13 gmt", "content type" "application/json", "content length" "191", "connection" "keep alive", "vary" "origin, accept encoding, origin", "strict transport security" "max age=31536000; includesubdomains", "r7 correlation id" "14f165c3 d476 45e3 a9f1 13df3a33426b", "access control allow credentials" "true", "access control expose headers" "r7 correlation id", "ratelimit limit" "1500", "ratelimit reset" "900", "ratelimit remaining" "1499", "x ratelimit limit" "1500", "x ratelimit reset" "900", "x ratelimit remaining" "1499" }, "reason" "ok", "json body" { "saved queries" \[ { "id" "00000000 0000 1616 0000 000000000000", "name" "count of events", "leql" { "statement" "calculate(count)", "during" { "time range" null, "to" null, "from" null } }, "logs" \[] } ] } } ] output parameters status code (number) reason (string) json body (object) saved queries (array) id (string) name (string) leql (object) statement (string) during (object) time range (object) to (object) from (object) logs (array) response headers header type date string content type string content length string connection string vary string strict transport security string r7 correlation id string access control allow credentials string access control expose headers string ratelimit limit string ratelimit reset string ratelimit remaining string x ratelimit limit string x ratelimit reset string x ratelimit remaining string