Skip to main content
POST
/
core.v1.LogsService
/
ListLogAggregations
cURL
curl -X POST "https://api.joinformal.com/core.v1.LogsService/ListLogAggregations" \
  -H "X-API-KEY: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "example": "value"
  }'
{
  "aggregations": {
    "logsOverTime": [
      {
        "datetime": "<string>",
        "count": 123,
        "buckets": [
          {
            "key": "<string>",
            "count": 123,
            "buckets": "<array>"
          }
        ]
      }
    ],
    "sessionTypes": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "sessionIds": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "sessionApplicationNames": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "sessionClientIpAddresses": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "sessionServerIpAddresses": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "queryFingerprints": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "queryNormalized": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "queryReceived": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "querySent": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "resourceIds": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "resourceNames": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "resourceTypes": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "resourceHostnames": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "resourceTechnologies": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "connectorNames": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "connectorIds": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "spaceNames": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "spaceIds": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "userTypes": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "userSubTypes": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "userEmails": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "userUsernames": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "userIds": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "endUserTypes": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "endUserNames": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "endUserEmails": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "triggeredPolicyIds": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "triggeredPolicyNames": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "triggeredPolicyStatuses": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "triggeredPolicyTypes": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "responseDataVolumes": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "responseReturnedColumnNames": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "responseReturnedColumnPaths": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "responseReturnedColumnDataLabels": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "responseRowsSent": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "responseRowsReceived": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "deviceSystemVersions": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "deviceKernelVersions": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "deviceComputerNames": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "deviceUserNames": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "deviceModelNames": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "deviceModelIdentifiers": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "deviceModelNumbers": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "deviceSerialNumbers": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "userGroups": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "endUserGroups": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "controlPlaneCommandNames": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "controlPlaneCommandTypes": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "controlPlanePolicyActions": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "controlPlaneServices": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "controlPlaneMethods": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "controlPlaneUserEmails": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "controlPlaneUserTypes": [
      {
        "key": "<string>",
        "count": 123
      }
    ],
    "controlPlaneUserIds": [
      {
        "key": "<string>",
        "count": 123
      }
    ]
  },
  "numHits": 123
}

Authorizations

X-API-KEY
string
header
required

API key authentication. Get your API key from the Formal console.

Body

application/json
query
string
startTimestamp
string
Minimum string length: 1
endTimestamp
string
Minimum string length: 1
histogramInterval
string
histogramGroupByFields
string[]
Maximum array length: 3

Response

Success

aggregations
aggregations · object
numHits