Skip to content

Get-S1DvQueryResults

SYNOPSIS

Retrieve results for a SentinelOne Deep Visibility query.

SYNTAX

Default (Default)

Get-S1DvQueryResults -QueryID <String> [<CommonParameters>]

CountOnly

Get-S1DvQueryResults -QueryID <String> [-CountOnly] [<CommonParameters>]

DESCRIPTION

This function retrieves the results of a SentinelOne Deep Visibility query using the specified Query ID. It supports returning the total count of matching events or retrieving the full event data.

EXAMPLES

EXAMPLE 1

Get-S1DvQueryResults -QueryID "12345"

Retrieves the full results for the Deep Visibility query with ID "12345".

EXAMPLE 2

Get-S1DvQueryResults -QueryID "12345" -CountOnly

Retrieves only the total count of matching events for the Deep Visibility query with ID "12345".

PARAMETERS

-QueryID

The ID of the Deep Visibility query for which to retrieve results.

Type: String
Parameter Sets: (All)
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-CountOnly

A switch to return only the total count of matching events for the specified query.

Type: SwitchParameter
Parameter Sets: CountOnly
Aliases:

Required: True
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES