Get Unique Field Values

get

https://api.greynoise.io/v3/sessions/unique

Returns unique values for a session field as a CSV download, optionally with counts. Useful for extracting distinct IPs, ports, or other field values matching a query.

Query Params

scope

string

enum

Defaults to workspace

Controls the data scope for the query.

workspace: Query data from the current workspace (default). Requires the Sensors entitlement.
demo: Query demo/sample data. Requires the Swarm entitlement. Not available on export endpoints.

Allowed:

start_time

date-time

required

Start time for the query range (ISO 8601 format).

end_time

date-time

required

End time for the query range (ISO 8601 format).

field

string

required

Field to get unique values for.

query

string

Lucene query string to filter sessions.

include_counts

string

enum

Defaults to false

Whether to include counts in the output.

Allowed:

Headers

string

enum

Defaults to application/json

Generated from available response content types

Allowed:

Responses

Language

Credentials

Header

URL

Response

Click Try It! to start a request and see the response here! Or choose an example:

text/csv

application/json

200CSV file with unique values.

400Bad request - request syntax is invalid for the specified endpoint. Verify request syntax and try again.

401Unauthorized. Please check your API key.

403Forbidden - request is not authorized due to an invalid API key or plan limitations. If due to plan limitations, contact [email protected] to upgrade your plan and unlock full results.

429Too many requests. You've hit the rate-limit.

500Unexpected error