Skip to content

feat: ioc batch-search --info=locations + --limit#286

Merged
maximelb merged 1 commit into
cli-v2from
feat/batch-locations
May 2, 2026
Merged

feat: ioc batch-search --info=locations + --limit#286
maximelb merged 1 commit into
cli-v2from
feat/batch-locations

Conversation

@maximelb
Copy link
Copy Markdown
Contributor

@maximelb maximelb commented May 2, 2026

Summary

CLI/SDK support for the new info and limit params on POST /insight/{oid}/objects (lc_api-go feat/batch-ioc-locations-info-param), which routes to insight-go's get_obj_batch_locations RPC (insight-go ac80936 / #280).

  • Insight.batch_search SDK gains info (`summary` | `locations`) and limit kwargs.
  • limacharlie ioc batch-search gains --info and --limit flags.
  • Default behavior unchanged (`info=summary`, no limit) — existing callers keep getting the four-bucket prevalence response.
  • The whole batch still consumes a single ioc-search rate-limit charge regardless of --info. That gateway-level protection is what makes the batch endpoint preferable to fanning out per-IOC search calls.

Test plan

  • tests/unit/test_sdk_insight.py covers default info=summary, info=locations, limit included/excluded.
  • Full unit suite still passes (957 passed; 1 pre-existing TOON optional-dep failure on cli-v2 unrelated to this PR).
  • Manual: run `limacharlie ioc batch-search --input-file iocs.json --info locations --limit 50` against an org where insight-go has the new RPC deployed.

Depends on

🤖 Generated with Claude Code

Surfaces the new info=locations / limit params on POST
/insight/{oid}/objects (lc_api-go) which routes to insight-go's
get_obj_batch_locations RPC. Adds the params to Insight.batch_search
and exposes them as --info / --limit on the batch-search CLI.

The whole batch still consumes a single ioc-search rate-limit
charge regardless of --info -- that's the entire reason callers
should prefer batch-search over fanning out per-IOC search calls.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@maximelb maximelb requested a review from dzimine-lc May 2, 2026 18:28
@maximelb maximelb marked this pull request as ready for review May 2, 2026 18:29
@maximelb maximelb merged commit 26f84d0 into cli-v2 May 2, 2026
7 checks passed
@maximelb maximelb deleted the feat/batch-locations branch May 2, 2026 18:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant