quaxar-open-indicators
Get open indicators from S2W Quaxar service.
quaxar-open-indicators [duration=NUM{mon|w|d|h|m|s}] [from=yyyyMMddHHmmss] [to=yyyyMMddHHmmss]
- duration=NUM{mon|w|d|h|m|s}
- Scan only recent data. You should use s(second), m(minute), h(hour), d(day), mon(month) time unit. For example,
10smeans data from 10 seconds earlier. - from=yyyyMMddHHmmss
- Start time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
- to=yyyyMMddHHmmss
- End time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| type | String | Report type | |
| published | Date | Published | |
| title | String | Report title | |
| body | String | Report content | |
| featured | Bool | Featured | true or false |
| priority | Integer | Priority | 1 by default. A bigger number means a higher priority. |
| risk_score | Integer | Risk score | 1 by default. A bigger number means a higher risk |
| reference | String | Reference | |
| doc_link | String | Doc link | e.g. /knowledgebase/document/report--[GUID] |
| uuid | String | UUID |