Updates and Corrections to JupiterOne Query API

Summary

Being able to retrieve all results of a query reliably is a critical capability for users of JupiterOne. There have been various improvements made to the JupiterOne query API over the years. This page is used to capture the details of ongoing updates and corrections to the JupiterOne Query API.

Variable Result Size (September 2024)

Queries are now assumed to tolerate variable result sizes unless otherwise specified. Usage of VariableResultsSize: true is required to retrieve stable and complete results.

More detailed information is available here.

_type Always Returned as String (October 2024)

Every entity in the JupiterOne graph has a _type property. Work was previously done to ensure that this was always returned as a string value. A defect was identified whereby aliasing this property could cause it to sometimes be returned as an array of length 1.

Going forward the _type property will always be returned as a string even if the property has been aliased, for example:

FIND Host AS h
RETURN h._type AS "Host Type"

Old behavior would return a response like this:

... "Host Type":["device42_device"] ...

New behavior guarantees this response:

... "Host Type":"device42_device" ...