Scheduled Queries

If you have scheduled a Sigma query, you’ll receive a sigma.scheduled_query_run.created webhook each time the query runs. The webhook contains a ScheduledQueryRun object, which you can use to retrieve the query results.

Endpoints

Retrieve a scheduled query run

• GET /v1/sigma/scheduled_query_runs/:id

List all scheduled query runs

• GET /v1/sigma/scheduled_query_runs

Events

• sigma.scheduled_query_run.created Occurs whenever a Sigma scheduled query run finishes.