Get InstaQuery results
BlackBerry OpticsInstaQuery resource results belonging to a tenant.
Optional query string parameters
Please see the Response status codes for more information.
Response JSON schema
This is the unique ID of the InstaQuery.
This is the status of the InstaQuery.
This is the list of responses to the InstaQuery.
This is the timestamp that the result was reported in Unix epoch time.
This is the hostname of the device that returned the result.
This is the unique ID of the device that returned the result.
This is the version format of the result.
This is the unique correlation ID of the result object.
This is the object containing response data.
This is the timestamp that the result was first observed on the system (for example, when a file was first observed on the system as in a file being created)
This is the timestamp that the result was last observed on the system (for example, when a file was last observed as in the last time a file was interacted with).
This value will be the same as the FirstObservedTimestamp for NetworkConnection and process artifacts.
This is the unique ID of the result.
This is the type of artifact that the result's "properties" contain.
This is the object containing the individual elements of the result. This will vary depending on the artifact and type that was queried. The following 4 cells outline the possible property values: