Get Search Results

Get a search's results by an account and search ID.

Basic Parameters

Parameter	Description
Account ID	The user account ID.
Search ID	The search ID.

Advanced Parameters

Parameter	Description
Details	Return extra details about the search. Default value is False.
Limit	Limit the number of elements on the response, default value is 100.
Next Token	The next_token from a previous request to continue paging results.
Offset	Offset within a results page.
Selected Rows	list of result rows numbers, separated by comma (e.g. "2,5,29,31,45,99,100"). The length of the list is limited by the general requirements for the size of the GET request (2048 bytes, including URL). List should be encoded. If the requested row does not belong to the already found rows then it'll not be returned.

Example Output

{
    "account_id": "10110100",
    "data_type": "logmsgs",
    "next_token": "eyJ2ZXJzaW9uIjoiMS4wIiwib2Zmc2V0IjoxfQ==",
    "offset": 42,
    "remaining": 154,
    "results": {
        "columns": [
            "time_recv",
            "message",
            "metadata",
            "pid",
            "priority",
            "ingest_id_alias"
        ],
        "metadata": {
            "time_recv": "time_recv",
            "message": "message",
            "metadata": "metadata",
            "pid": "pid",
            "priority": "priority",
            "ingest_id_alias": "ingest_id"
        },
        "records": [
            {
                "fields": {
                    "ingest_id_alias": "a91p7zsr+AE=",
                    "message": "User `john` says `hello`",
                    "metadata": [
                        {
                            "create_ts": 11664230139839977473,
                            "data": "SGkgdGhlcmUK",
                            "meta_id": "q2NUkkO8MAE=",
                            "uuid": "n6fbm+xp8AE="
                        }
                    ],
                    "pid": 6186871400498344961,
                    "priority": 50,
                    "time_recv": 1506816000
                },
                "id": {
                    "account": 134231778,
                    "aid": 5001,
                    "datatype": "logmsgs",
                    "msgid": "QU1JNAgANuIAABOJWdAwAFnQMAAAAAABAAIAHmFwcGxpY2F0aW9uL3gtYWxwYWNrZXQtbG9nbXNncwAGTE9HTVNH"
                }
            }
        ]
    },
    "search_start": 1111111111,
    "search_end": 1234567890,
    "search_status": "complete",
    "search_uuid": "C4CBB079-7C4A-4A26-908A-79BEC9EA394B",
    "status_details": "complete",
    "total_found": 1
}

Workflow Library Example

Get Search Results with Alert Logic and Send Results Via Email

Preview this Workflow on desktop