Skip to main content

Retrohunts are run in parallel and are not queued up one after the other. This will increase the completion time. The recommendation is to run 1 retrohunt at a time and let that finish before starting a new retrohunt. Otherwise, the completion time will take longer.


How can you monitor if other team members are running retrohunts and if they are done?


You can use our ListRetrohunts Backstory API. You can filter by retrohunt status. The following API call would return all of the retrohunts that are being run and have not completed:


https://backstory.googleapis.com/v2/detect/rules/-/retrohunts?page_size=10&page_token=abc&state=RUNNING

You can use the sample code that you can use as well.


https://github.com/chronicle/api-samples-python


You can run the "list_retrohunts.py" as a module to look for retrohunts that are actively running in the following manner:


user@user:~/api-samples-python$ python3 -m detect.v2.list_retrohunts -st RUNNING -vi - -s 10 --c=../backstory_creds_file.json 

 

Be the first to reply!

Reply