Search Events

Search for events based on the specified query.

Required token: Logs Read Access.

Basic Parameters

Parameter	Description
End Time	The end of the time range to retrieve events from.
Query	A search expression to get matching events. For more information, visit the query language documentation.
Start Time	The start of the time range to retrieve events from.

Advanced Parameters

Parameter	Description
Max Count	The maximum number of events to get. Set from 1 to 5000.

Example Output

{
    "status": "success",
    "matches": [
        {
            "timestamp": "1393009097459537089",
            "message": "hello, world",
            "severity": 3,
            "session": "sess_d5952fdd-eed2-45f1-8106-b2f2af55dabd",
            "thread": "28",
            "attributes": {
                "tag": "foo"
            }
        }
    ],
    "sessions": {
        "sess_d5952fdd-eed2-45f1-8106-b2f2af55dabd": {
            "serverHost": "some.host.name",
            "serverIP": "1.2.3.4",
            "session": "sess_d5952fdd-eed2-45f1-8106-b2f2af55dabd"
        }
    },
    "cpuUsage": 12,
    "continuationToken": "L6_ckjI4BgATVPZkxGaUwQ--"
}

Workflow Library Example

Search Events with Dataset and Send Results Via Email

Preview this Workflow on desktop