Custom device Log Monitoring API - POST filtered log content

Gets the top content of the specified log.

The log content can be retrieved using this call only when logAnalysisStatus equals READY in the job status call.

The request consumes and produces an application/json payload.

Authentication

To execute this request, you need the Read log content (LogExport) permission assigned to your API token. To learn how to obtain and use it, see Tokens and authentication.

Parameters

Body format

      
  {
  "filterQuery": "`testCustomField` = 4624"
}
      
    

Response

When scrolling through the result records using a scroll token, the last result page contains an empty records array and no scrollToken field.

Response codes

Response body

    
{
  "parsingFieldTopValues": [
    {
      "fieldName": ".Level",
      "occurrences": [
        {
          "value": "INFO",
          "count": "100"
        }
      ]
    }
  ],
  "valuesCount": 0
}