GNQL Stats Then Sample
A 3-step recipe with GreyNoise Intelligence. We can help you get access.
Recipe · 3 steps
GNQL Stats Then Sample
with GreyNoise Intelligence · Threat Detection & Response Management
GNQL stats, then sample results and deep-context the first IP.
- Get aggregate statistics for the GNQL query including the total matched count and the top classifications, tags, actors, and organizations.
- Run the same GNQL query to retrieve a sample page of matching IP records.
- Retrieve the full IP context for the first sampled IP, including metadata, associated actor, activity tags, and raw scan data.
What you'll need to have ready
- apiKey: GreyNoise API key passed via the 'key' HTTP header.
- query: The GNQL query string to aggregate and sample.
- count: Number of top aggregates to grab in the stats step.
- size: Number of results per page in the sample step.
For your developer
Arazzo workflow greynoise:gnql-stats-then-sample, 3 operations: gnqlV3Stats → gnqlV3Query → V3IP. Specs on APIs.io.