Pre-Release

This feature is actively being developed. Breaking changes should be expected. Synqly Labs is available only in Synqly Mesh.

Please contact us before using this feature.

Orca

Labs URL: synqly://labs/orca

Create a Labs integration

Create an integration for the provider, the same way you would for the real provider.
Set the provider's URL to the Labs URL at the top of this page.
Fill in the credential fields. Labs accepts any value, but the credential must be the type the provider asks for, such as an OAuth client ID and secret or an API token.

Then call any operation the provider supports. Your requests run through the same connector that serves a real provider tenant, so the responses have the provider's shape and your code works against the real provider without changes.

Cloud Security

Provider: Orca Security

Operation	On Labs
`query_cloud_resource_inventory`	Available
`query_compliance_findings`	Available
`query_events`	Available
`query_ioms`	Available
`query_threats`	Available

`query_cloud_resource_inventory`

Filter	Operators	Not on Labs
`cloud.account.uid`	eq, in
`cloud.provider`	eq, in
`risk_level`	eq, in
`risk_level_id`	eq, in
`risk_score`	eq, gt, gte, lt, lte
`severity`	eq, in
`severity_id`	eq, in
`start_time`	gt, gte, lt, lte
`start_time_dt`	gt, gte, lt, lte
`time`	gt, gte, lt, lte
`time_dt`	gt, gte, lt, lte

`query_compliance_findings`

Filter	Operators	Not on Labs
`cloud.account.uid`	eq, in
`cloud.provider`	eq, in
`compliance.control`	eq, in
`compliance.standards`	eq, in
`severity`	eq, in
`severity_id`	eq, in

`query_events`

Filter	Operators	Not on Labs
`api.operation`	eq, in, like, not_like
`cloud.account.uid`	eq, in
`cloud.provider`	eq, in
`metadata.log_provider`	eq, in
`time`	gt, gte, lt, lte
`time_dt`	gt, gte, lt, lte

Sort	Directions	Not on Labs
`time`	asc, desc
`time_dt`	asc, desc

`query_ioms`

Filter	Operators	Not on Labs
`cloud.account.uid`	eq, in
`cloud.provider`	eq, in
`finding_info.created_time`	gt, gte, lt, lte
`finding_info.created_time_dt`	gt, gte, lt, lte
`finding_info.first_seen_time`	gt, gte, lt, lte
`finding_info.first_seen_time_dt`	gt, gte, lt, lte
`finding_info.last_seen_time`	gt, gte, lt, lte
`finding_info.last_seen_time_dt`	gt, gte, lt, lte
`finding_info.modified_time`	gt, gte, lt, lte
`finding_info.modified_time_dt`	gt, gte, lt, lte
`finding_info.title`	eq, in, like, not_like
`finding_info.types`	eq, in
`finding_info.uid`	eq, in
`metadata.event_code`	eq, in, like, not_like
`severity`	eq, in, ne, not_in
`severity_id`	eq, in, gt, gte, lt, lte
`status`	eq, in
`status_id`	eq, in
`time`	gt, gte, lt, lte
`time_dt`	gt, gte, lt, lte

Sort	Directions	Not on Labs
`cloud.provider`	asc, desc
`finding_info.created_time`	asc, desc
`finding_info.created_time_dt`	asc, desc
`finding_info.first_seen_time`	asc, desc
`finding_info.first_seen_time_dt`	asc, desc
`finding_info.last_seen_time`	asc, desc
`finding_info.last_seen_time_dt`	asc, desc
`finding_info.title`	asc, desc
`finding_info.uid`	asc, desc
`time`	asc, desc
`time_dt`	asc, desc

`query_threats`

Filter	Operators	Not on Labs
`cloud.account.uid`	eq, in
`cloud.provider`	eq, in
`finding_info.created_time`	gt, gte, lt, lte
`finding_info.created_time_dt`	gt, gte, lt, lte
`finding_info.first_seen_time`	gt, gte, lt, lte
`finding_info.first_seen_time_dt`	gt, gte, lt, lte
`finding_info.last_seen_time`	gt, gte, lt, lte
`finding_info.last_seen_time_dt`	gt, gte, lt, lte
`finding_info.modified_time`	gt, gte, lt, lte
`finding_info.modified_time_dt`	gt, gte, lt, lte
`finding_info.title`	eq, in, like, not_like
`finding_info.types`	eq, in
`finding_info.uid`	eq, in
`metadata.event_code`	eq, in, like, not_like
`severity`	eq, in, ne, not_in
`severity_id`	eq, in, gt, gte, lt, lte
`status`	eq, in
`status_id`	eq, in
`time`	gt, gte, lt, lte
`time_dt`	gt, gte, lt, lte

Sort	Directions	Not on Labs
`cloud.provider`	asc, desc
`finding_info.created_time`	asc, desc
`finding_info.created_time_dt`	asc, desc
`finding_info.first_seen_time`	asc, desc
`finding_info.first_seen_time_dt`	asc, desc
`finding_info.last_seen_time`	asc, desc
`finding_info.last_seen_time_dt`	asc, desc
`finding_info.title`	asc, desc
`finding_info.uid`	asc, desc
`time`	asc, desc
`time_dt`	asc, desc

Orca

Create a Labs integration

Cloud Security

query_cloud_resource_inventory

query_compliance_findings

query_events

query_ioms

query_threats

Was this helpful?

`query_cloud_resource_inventory`

`query_compliance_findings`

`query_events`

`query_ioms`

`query_threats`