Skip to main content
Store an organization-scoped investigation-stack JSON payload in object storage. The payload is limited to 1 MiB. The response returns blob_id; the compactor removes the blob after 7 days. Requires streams.query, or sys.telemetry.read in system scope.
Last modified on August 4, 2026