Response body

A successful execution returns a columnar result set:

JSON 
{
  "columns": [
    { "name": "at_timestamp", "type": "date_time" },
    { "name": "related.domain", "type": "string" },
    { "name": "client.ip", "type": "string" }
  ],
  "results": [
    ["2024-01-15T10:23:45Z", "example.com", "203.0.113.42"],
    ["2024-01-15T11:05:12Z", "sub.example.com", "198.51.100.7"]
  ]
}
Field Type Description
columns array Ordered list of column descriptors
columns[].name string Column name
columns[].type string Column data type
results array of arrays Each inner array is one row. Values are ordered to match columns by index.

To read a field value, match it to its column by position. For example, results[0][1] is the value of columns[1] in the first row.