# StartSearchV1

Initiate search

**POST** `/humio/api/v1/repositories/{repository}/queryjobs`
**Scope:** NGSIEM: WRITE

## Parameters

- **allowEventSkipping** (body boolean) — Enables some LogScale functions, such as head() and tail(), to stop processing all data in the selected timeframe and exit the query early
- **arguments** (body object) — JSON blob with parameters defined in query
- **around** (body object) — Find events that occurred around the time of a specific event.
- **autobucketCount** (body integer) — The number of buckets the system should create during live query searches, when no other explicit bucketing aggregate is specified
- **end** (body string) — The date and time to use as the ending point of the search results
- **ingestEnd** (body string) — The end date and time applied for @ingesttimestamp
- **ingestStart** (body string) — The end date and time applied for @ingesttimestamp
- **isLive** (body boolean) — Sets whether this query is live. Defaults to false . Live queries are continuously updated.
- **queryString** (body string) — The CQL query to use for the search
- **start** (body string) — The date and time to use as the starting point of the search results
- **timeZone** (body string) — The time zone to use if start and end times are not specified in milliseconds. Eg: UTC
- **timeZoneOffsetMinutes** (body integer) — A positive or negative number representing how many minutes a given time zone is ahead or behind Coordinated Universal Time (UTC)
- **useIngestTime** (body boolean) — When set to true, the event’s ingestStart and ingestEnd times are used as the basis for the query timespan rather than the start and end timestamps
- **repository** (path string) — name of repository

## Example (Python)

```python
from falconpy import NGSIEM

falcon = NGSIEM(client_id=CLIENT_ID,
                client_secret=CLIENT_SECRET
                )

arguments = {}

around = {
    "eventId": "string",
    "numberOfEventsAfter": "integer",
    "numberOfEventsBefore": "integer",
    "timestamp": "integer"
}

response = falcon.start_search(allow_event_skipping=boolean,
                               arguments=arguments,
                               around=around,
                               autobucket_count=integer,
                               end="string",
                               ingest_end=integer,
                               ingest_start=integer,
                               is_live=boolean,
                               query_string="string",
                               repository="string",
                               search="string",
                               start="string",
                               timezone="string",
                               timezone_offset_minutes=integer)
print(response)
```

## Response

```json
{
  "hashedQueryOnView": "string",
  "id": "string"
}
```