Interface SecurityMonitoringApiGetEntityContextRecentlyUpdatedRequest

The type of entity to retrieve. Only siem_entity_identity is currently supported. Defaults to siem_entity_identity.

The start of the time range to query, as an RFC3339 timestamp or a relative time (for example, now-7d). Defaults to now-7d.

The number of entities to return. Must be between 1 and 100.

A free-text query (for example, an email address or principal ID) used to filter the entities returned.

Which revisions to return for each entity: latest returns only the latest revision of each entity as of to, and all returns every revision in the requested time range.

The end of the time range to query, as an RFC3339 timestamp or a relative time (for example, now). Defaults to now. Entities are ranked by their most recent revision within [from, to].