The ids of the logs to search.
One of either the from
or the from_tags
parameters must be specified.
The tags to search. Each tag should be in the form <key>:<value>
, e.g., environment:production
.
One of either the from
or the from_tags
parameters must be specified.
If both are specified then from_tags
takes precedence, and the from
value is ignored.
If the key or the value contain a :
or =
character, then these can be escaped by wrapping the entire key or value in double-quotes "
.
The timestamp for the event for which context is being retrieved
The maximum number of events that an event search should return. In a query with a group by, it limits the number of groups returned. It does not affect a statistical search using aggregate functions.
1 <= x <= 6666
The starting sequence for which to query data. This is more granular than a timestamp but also requires a from_ts
param.
Enum to indicate if results before or after should be retrieved.
both
, after
, before
If set to true
then only the explain
element of the response will be populated. The explain
element will contain the Approximate bytes in time range
attribute which provides an estimate for the amount of data present in the time range for the selected datasets. This parameter is set to false
by default.
Search results
The response is of type object
.
The ids of the logs to search.
One of either the from
or the from_tags
parameters must be specified.
The tags to search. Each tag should be in the form <key>:<value>
, e.g., environment:production
.
One of either the from
or the from_tags
parameters must be specified.
If both are specified then from_tags
takes precedence, and the from
value is ignored.
If the key or the value contain a :
or =
character, then these can be escaped by wrapping the entire key or value in double-quotes "
.
The timestamp for the event for which context is being retrieved
The maximum number of events that an event search should return. In a query with a group by, it limits the number of groups returned. It does not affect a statistical search using aggregate functions.
1 <= x <= 6666
The starting sequence for which to query data. This is more granular than a timestamp but also requires a from_ts
param.
Enum to indicate if results before or after should be retrieved.
both
, after
, before
If set to true
then only the explain
element of the response will be populated. The explain
element will contain the Approximate bytes in time range
attribute which provides an estimate for the amount of data present in the time range for the selected datasets. This parameter is set to false
by default.
Search results
The response is of type object
.