Expression that defines the filter to apply across findings.
The expression is a list of one or more restrictions combined via logical
operators AND and OR.
Parentheses are supported, and OR has higher precedence than AND.
Restrictions have the form <field> <operator> <value> and may have a -
character in front of them to indicate negation. Examples include:
name
security_marks.marks.marka
The supported operators are:
= for all value types.
>, <, >=, <= for integer values.
:, meaning substring matching, for strings.
The supported value types are:
string literals in quotes.
integer literals without quotes.
boolean literals true and false without quotes.
The following field and operator combinations are supported:
name: =
parent: =, :
resource_name: =, :
state: =, :
category: =, :
external_uri: =, :
event_time: =, >, <, >=, <=
Usage: This should be milliseconds since epoch or an RFC3339 string.
Examples:
event_time = "2019-06-10T16:07:18-07:00"event_time = 1560208038000
Expression that defines what fields and order to use for sorting. The
string value should follow SQL syntax: comma separated list of fields. For
example: "name,parent". The default sorting order
is ascending. To specify descending order for a field, a suffix " desc"
should be appended to the field name. For example: "name
desc,parent". Redundant space characters in the
syntax are insignificant. "name desc,parent" and "
name desc , parent " are equivalent.
The following fields are supported:
name
parent
state
category
resource_name
event_time
security_marks.marks
The value returned by the last ListFindingsResponse; indicates
that this is a continuation of a prior ListFindings call, and
that the system should return the next page of data.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe \u003ccode\u003eListFindingsRequest\u003c/code\u003e class is used to request a list of findings from the Security Command Center v2 API.\u003c/p\u003e\n"],["\u003cp\u003eThis class inherits from \u003ccode\u003eobject\u003c/code\u003e and implements several interfaces including \u003ccode\u003eIPageRequest\u003c/code\u003e, \u003ccode\u003eIMessage\u003c/code\u003e, \u003ccode\u003eIEquatable\u003c/code\u003e, \u003ccode\u003eIDeepCloneable\u003c/code\u003e, and \u003ccode\u003eIBufferMessage\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003e\u003ccode\u003eListFindingsRequest\u003c/code\u003e allows filtering, ordering, and paging of results, using properties like \u003ccode\u003eFilter\u003c/code\u003e, \u003ccode\u003eOrderBy\u003c/code\u003e, \u003ccode\u003ePageSize\u003c/code\u003e, and \u003ccode\u003ePageToken\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eParent\u003c/code\u003e property is required and specifies the source the findings belong to, with options to list across all sources.\u003c/p\u003e\n"],["\u003cp\u003eIt includes constructors for creating instances, either empty or by copying another \u003ccode\u003eListFindingsRequest\u003c/code\u003e object, as well as provides the ability to specify a field mask for more customizability.\u003c/p\u003e\n"]]],[],null,["# Security Command Center v2 API - Class ListFindingsRequest (1.2.0)\n\nVersion latestkeyboard_arrow_down\n\n- [1.2.0 (latest)](/dotnet/docs/reference/Google.Cloud.SecurityCenter.V2/latest/Google.Cloud.SecurityCenter.V2.ListFindingsRequest)\n- [1.1.0](/dotnet/docs/reference/Google.Cloud.SecurityCenter.V2/1.1.0/Google.Cloud.SecurityCenter.V2.ListFindingsRequest)\n- [1.0.0](/dotnet/docs/reference/Google.Cloud.SecurityCenter.V2/1.0.0/Google.Cloud.SecurityCenter.V2.ListFindingsRequest) \n\n public sealed class ListFindingsRequest : IPageRequest, IMessage\u003cListFindingsRequest\u003e, IEquatable\u003cListFindingsRequest\u003e, IDeepCloneable\u003cListFindingsRequest\u003e, IBufferMessage, IMessage\n\nReference documentation and code samples for the Security Command Center v2 API class ListFindingsRequest.\n\nRequest message for listing findings. \n\nInheritance\n-----------\n\n[object](https://learn.microsoft.com/dotnet/api/system.object) \\\u003e ListFindingsRequest \n\nImplements\n----------\n\n[IPageRequest](https://cloud.google.com/dotnet/docs/reference/Google.Api.Gax/latest/Google.Api.Gax.Grpc.IPageRequest.html), [IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage-1.html)[ListFindingsRequest](/dotnet/docs/reference/Google.Cloud.SecurityCenter.V2/latest/Google.Cloud.SecurityCenter.V2.ListFindingsRequest), [IEquatable](https://learn.microsoft.com/dotnet/api/system.iequatable-1)[ListFindingsRequest](/dotnet/docs/reference/Google.Cloud.SecurityCenter.V2/latest/Google.Cloud.SecurityCenter.V2.ListFindingsRequest), [IDeepCloneable](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IDeepCloneable-1.html)[ListFindingsRequest](/dotnet/docs/reference/Google.Cloud.SecurityCenter.V2/latest/Google.Cloud.SecurityCenter.V2.ListFindingsRequest), [IBufferMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IBufferMessage.html), [IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage.html) \n\nInherited Members\n-----------------\n\n[object.GetHashCode()](https://learn.microsoft.com/dotnet/api/system.object.gethashcode) \n[object.GetType()](https://learn.microsoft.com/dotnet/api/system.object.gettype) \n[object.ToString()](https://learn.microsoft.com/dotnet/api/system.object.tostring)\n\nNamespace\n---------\n\n[Google.Cloud.SecurityCenter.V2](/dotnet/docs/reference/Google.Cloud.SecurityCenter.V2/latest/Google.Cloud.SecurityCenter.V2)\n\nAssembly\n--------\n\nGoogle.Cloud.SecurityCenter.V2.dll\n\nConstructors\n------------\n\n### ListFindingsRequest()\n\n public ListFindingsRequest()\n\n### ListFindingsRequest(ListFindingsRequest)\n\n public ListFindingsRequest(ListFindingsRequest other)\n\nProperties\n----------\n\n### FieldMask\n\n public FieldMask FieldMask { get; set; }\n\nA field mask to specify the Finding fields to be listed in the response.\nAn empty field mask will list all fields.\n\n### Filter\n\n public string Filter { get; set; }\n\nExpression that defines the filter to apply across findings.\nThe expression is a list of one or more restrictions combined via logical\noperators `AND` and `OR`.\nParentheses are supported, and `OR` has higher precedence than `AND`.\n\nRestrictions have the form `\u003cfield\u003e \u003coperator\u003e \u003cvalue\u003e` and may have a `-`\ncharacter in front of them to indicate negation. Examples include:\n\n- name\n- security_marks.marks.marka\n\nThe supported operators are:\n\n- `=` for all value types.\n- `\u003e`, `\u003c`, `\u003e=`, `\u003c=` for integer values.\n- `:`, meaning substring matching, for strings.\n\nThe supported value types are:\n\n- string literals in quotes.\n- integer literals without quotes.\n- boolean literals `true` and `false` without quotes.\n\nThe following field and operator combinations are supported:\n\n- name: `=`\n- parent: `=`, `:`\n- resource_name: `=`, `:`\n- state: `=`, `:`\n- category: `=`, `:`\n- external_uri: `=`, `:`\n- event_time: `=`, `\u003e`, `\u003c`, `\u003e=`, `\u003c=`\n\n Usage: This should be milliseconds since epoch or an RFC3339 string.\n Examples:\n `event_time = \"2019-06-10T16:07:18-07:00\"`\n `event_time = 1560208038000`\n- severity: `=`, `:`\n\n- security_marks.marks: `=`, `:`\n- resource:\n - resource.name: `=`, `:`\n - resource.parent_name: `=`, `:`\n - resource.parent_display_name: `=`, `:`\n - resource.project_name: `=`, `:`\n - resource.project_display_name: `=`, `:`\n - resource.type: `=`, `:`\n - resource.folders.resource_folder: `=`, `:`\n - resource.display_name: `=`, `:`\n\n### OrderBy\n\n public string OrderBy { get; set; }\n\nExpression that defines what fields and order to use for sorting. The\nstring value should follow SQL syntax: comma separated list of fields. For\nexample: \"name,parent\". The default sorting order\nis ascending. To specify descending order for a field, a suffix \" desc\"\nshould be appended to the field name. For example: \"name\ndesc,parent\". Redundant space characters in the\nsyntax are insignificant. \"name desc,parent\" and \"\nname desc , parent \" are equivalent.\n\nThe following fields are supported:\nname\nparent\nstate\ncategory\nresource_name\nevent_time\nsecurity_marks.marks\n\n### PageSize\n\n public int PageSize { get; set; }\n\nThe maximum number of results to return in a single response. Default is\n10, minimum is 1, maximum is 1000.\n\n### PageToken\n\n public string PageToken { get; set; }\n\nThe value returned by the last `ListFindingsResponse`; indicates\nthat this is a continuation of a prior `ListFindings` call, and\nthat the system should return the next page of data.\n\n### Parent\n\n public string Parent { get; set; }\n\nRequired. Name of the source the findings belong to. If no location is\nspecified, the default is global. The following list shows some examples:\n\n- `organizations/[organization_id]/sources/[source_id]` + `organizations/[organization_id]/sources/[source_id]/locations/[location_id]`\n- `folders/[folder_id]/sources/[source_id]`\n- `folders/[folder_id]/sources/[source_id]/locations/[location_id]`\n- `projects/[project_id]/sources/[source_id]`\n- `projects/[project_id]/sources/[source_id]/locations/[location_id]`\n\nTo list across all sources provide a source_id of `-`. The following\nlist shows some examples:\n\n- `organizations/{organization_id}/sources/-`\n- `organizations/{organization_id}/sources/-/locations/{location_id}`\n- `folders/{folder_id}/sources/-`\n- `folders/{folder_id}/sources/-locations/{location_id}`\n- `projects/{projects_id}/sources/-`\n- `projects/{projects_id}/sources/-/locations/{location_id}`\n\n### ParentAsSourceName\n\n public SourceName ParentAsSourceName { get; set; }\n\n[SourceName](/dotnet/docs/reference/Google.Cloud.SecurityCenter.V2/latest/Google.Cloud.SecurityCenter.V2.SourceName)-typed view over the [Parent](/dotnet/docs/reference/Google.Cloud.SecurityCenter.V2/latest/Google.Cloud.SecurityCenter.V2.ListFindingsRequest#Google_Cloud_SecurityCenter_V2_ListFindingsRequest_Parent) resource name property."]]
