Scan Selection

Many endpoints offer the ability to retrieve records as of specific dates.

By default, the current scan for the identified target will be used.

To return records from a specific scan, provide a timestamp via the asof query parameter or the x-ts-asof HTTP header.

  • The last scan prior to the provided value will be used

  • The timestamp must be provided in the format of YYYY-MM-DD HH24:MI and in UTC. (If no time is provided 24:00 will be assumed.)

A single scan can also be selected using the scan_id query parameter or the x-ts-scan_id HTTP header.

Supported endpoints

The following methods support the use of the asof parameter or x-ts-asof header to query records:

Endpoint
Method

Last updated

© 2024 Halo Security