Lookups

`core.table.lookup`

Get a single row from a table corresponding to the given column and value.

Inputs

string

required

The column to lookup the value in.

string

required

The table to lookup the value in.

any

required

The value to lookup.

Examples

Look up rows

- ref: lookup_row
  action: core.table.lookup
  args:
    table: asset_inventory
    column: hostname
    value: ${{ TRIGGER.hostname }}
- ref: row_exists
  action: core.table.is_in
  args:
    table: asset_inventory
    column: hostname
    value: ${{ TRIGGER.hostname }}
- ref: lookup_many_rows
  action: core.table.lookup_many
  args:
    table: asset_inventory
    column: owner
    value: secops
    limit: 25

`core.table.is_in`

Check if a value exists in a table column.

Inputs

string

required

The column to check in.

string

required

The table to check.

any

required

The value to check for.

Examples

Look up rows

- ref: lookup_row
  action: core.table.lookup
  args:
    table: asset_inventory
    column: hostname
    value: ${{ TRIGGER.hostname }}
- ref: row_exists
  action: core.table.is_in
  args:
    table: asset_inventory
    column: hostname
    value: ${{ TRIGGER.hostname }}
- ref: lookup_many_rows
  action: core.table.lookup_many
  args:
    table: asset_inventory
    column: owner
    value: secops
    limit: 25

`core.table.lookup_many`

Get multiple rows from a table corresponding to the given column and values.

Inputs

string

required

The column to lookup the value in.

string

required

The table to lookup the value in.

any

required

The value to lookup.

integer

The maximum number of rows to return.Default: 100.

Examples

Look up rows

- ref: lookup_row
  action: core.table.lookup
  args:
    table: asset_inventory
    column: hostname
    value: ${{ TRIGGER.hostname }}
- ref: row_exists
  action: core.table.is_in
  args:
    table: asset_inventory
    column: hostname
    value: ${{ TRIGGER.hostname }}
- ref: lookup_many_rows
  action: core.table.lookup_many
  args:
    table: asset_inventory
    column: owner
    value: secops
    limit: 25

`core.table.search_rows`

Search for rows in a table with optional filtering.

Inputs

string

required

The table to search in.

string | null

Cursor for pagination.Default: null.

string | null

Filter rows created before this time.Default: null.

integer

The maximum number of rows to return.Default: 100.

boolean

If true, return cursor pagination metadata along with items.Default: false.

boolean

Reverse pagination direction.Default: false.

string | null

Text to search for across all text and JSONB columns.Default: null.

string | null

Filter rows created after this time.Default: null.

string | null

Filter rows updated after this time.Default: null.

string | null

Filter rows updated before this time.Default: null.

Examples

Search table rows

- ref: search_rows
  action: core.table.search_rows
  args:
    table: asset_inventory
    search_term: database
    limit: 50
    paginate: true

Request

Transform

Workflow

Agent

Case

Table

`core.table.lookup`

Inputs

Examples

`core.table.is_in`

Inputs

Examples

`core.table.lookup_many`

Inputs

Examples

`core.table.search_rows`

Inputs

Examples

​core.table.lookup

​Inputs

​Examples

​core.table.is_in

​Inputs

​Examples

​core.table.lookup_many

​Inputs

​Examples

​core.table.search_rows

​Inputs

​Examples

`core.table.lookup`

Inputs

Examples

`core.table.is_in`

Inputs

Examples

`core.table.lookup_many`

Inputs

Examples

`core.table.search_rows`

Inputs

Examples