Search for events based on the specified query. Required token: Logs Read Access.

​
Basic Parameters

ParameterDescription
End TimeThe end of the time range to retrieve events from.
QueryA search expression to get matching events. For more information, visit the query language documentation.
Start TimeThe start of the time range to retrieve events from.

​
Advanced Parameters

ParameterDescription
Max CountThe maximum number of events to get. Set from 1 to 5000.

​
Example Output

{
	"status": "success",
	"matches": [
		{
			"timestamp": "1393009097459537089",
			"message": "hello, world",
			"severity": 3,
			"session": "sess_d5952fdd-eed2-45f1-8106-b2f2af55dabd",
			"thread": "28",
			"attributes": {
				"tag": "foo"
			}
		}
	],
	"sessions": {
		"sess_d5952fdd-eed2-45f1-8106-b2f2af55dabd": {
			"serverHost": "some.host.name",
			"serverIP": "1.2.3.4",
			"session": "sess_d5952fdd-eed2-45f1-8106-b2f2af55dabd"
		}
	},
	"cpuUsage": 12,
	"continuationToken": "L6_ckjI4BgATVPZkxGaUwQ--"
}

​
Workflow Library Example

Search Events with Dataset and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop