Skip to main content
Question

List investigations - Query parameters not working

  • January 27, 2026
  • 1 reply
  • 4 views

baannanna
Forum|alt.badge.img

https://docs.cloud.google.com/chronicle/docs/reference/rest/v1alpha/projects.locations.instances.investigations/list?rep_location=africa-south1

using the above doc, im trying to pass an alertId or caseId as parameters in the filter field, but i keep getting this error - 

INVALID_ARGUMENTCan anyone help on this. Many Thanks in advance.

    param = {

        "filter": "alertId=<alert_id>"

    }

 

base = "https://us-chronicle.googleapis.com/v1alpha/projects/<project_id>/locations/us/instances/<instance_id>/investigations"

 

    try:

 

        response = mysession.session.get(url=base, params=param)

        rt = response.json()

        print(rt)

   

 

    except Exception as e:

        print("\nError ",e)

error im getting :

{'error': {'code': 400, 'message': 'failed to list investigations', 'status': 'INVALID_ARGUMENT'}}

1 reply

mikewilusz
Staff
Forum|alt.badge.img+10
  • Staff
  • January 27, 2026

In a script that I have I actually provide the parameter in the URL, rather than use the python requests params. This is the URL I call with a GET:  
 

triage_agent_status_url = f"https://us-chronicle.googleapis.com/v1alpha/projects/<PROJECT_ID>/us/instances/<SECOPS_CUSTOMER_ID>/investigations?filter=alert_id='" + alert_id + "'"

req = requests.get(triage_agent_status_url, headers=auth_header)

 

Hope this helps!

 

-mike