Actions149
- Attack Pattern Actions
- Campaign Actions
- City Actions
- Country Actions
- Course of Action Actions
- External Reference Actions
- Incident Actions
- Indicator Actions
- Individual Actions
- Infrastructure Actions
- Intrusion Set Actions
- Kill Chain Phase Actions
- Label Actions
- Malware Actions
- Marking Definition Actions
- Note (RFI) Actions
- Observable Actions
- Observed Data Actions
- Opinion Actions
- Position Actions
- Region Actions
- Relationship Actions
- Report Actions
- Sector Actions
- Sighting Actions
- System Actions
- Task Actions
- Threat Actor Actions
- Tool Actions
- Vulnerability Actions
Relationship → Search
AI-generatedSummary
Search relationships using entity IDs, relationship type, search term, and a result limit.
Inputs
- fromOrToId — Filter by entity appearing on either side of the relationship
- fromId — From Entity ID
- relationship_type — Comma-separated relationship types (e.g. uses,targets)
- search — Search term to match against relationship attributes
- toId — To Entity ID
- limit — Maximum number of results to return (1‑500)
Output shape
a list of relationship objects
Returns up to the configured limit; may return fewer matches or none.
Examples
Example 1: Search for relationships where either endpoint is entity 123 and the relationship type is 'uses'.
fromOrToId=123&relationship_type=uses&limit=50
Example 2: Search all relationships containing the word 'malware' and limit results to 20.
search=malware&limit=20