post
/public_api/v1/xql/add_dataset
Add a dataset of type lookup
with the specified name and schema.
Required license: Cortex XDR Pro per Endpoint or Cortex XDR Pro per GB
Body parameters
requestObjectrequired
dataset_nameString
The designated name of the dataset.
dataset_typeObject (Enum)
Dataset type. Currently only lookup
is supported.
Allowed values:"lookup"
dataset_schemaObject
The schema of the dataset in a comma-separated list of JSON pairs where the key is the field name and the value is the field type.
REQUEST BODY
{
"request": {
"dataset_name": "users",
"dataset_schema": {
"uid": "text",
"username": "text",
"zipcode": "number",
"salary": "number",
"is_admin": "bool",
"birthday": "datetime"
},
"dataset_type": "lookup"
}
}
CURL
curl -X 'POST'
-H
'Accept: application/json'
-H
'Content-Type: application/json'
'https://api-yourfqdn/public_api/v1/xql/add_dataset'
-d
''
Responses