Enrich entities by search query

Starts enricher tasks for the entities that match the specified search query.
Enrichment is done on the entities extracts (observables)
with a list of selected enrichers, if extracts are supported by specified enrichers.

For a search query with a relatively big number of matched entities,
the endpoint might have scalability issues since a new enricher task is triggered per
single extract. Recommended way to work with big dataset is to use time-window
filters to reduce the number of matching entities...

The endpoint only starts enricher tasks, and the caller should later retrieve
task group information to get the status of the whole operation.

Required permissions

  • modify enrichments

  • read entities

  • read tasks

  • read enrichers

Click Try It! to start a request and see the response here!