Chilkat Online Tools

PowerBuilder / Datadog API Collection / Aggregate events

Back to Collection Items

integer li_rc
oleobject loo_Http
integer li_Success
oleobject loo_Json
oleobject loo_Resp
oleobject loo_SbResponseBody
oleobject loo_JResp
integer li_RespStatusCode
string ls_Description
string ls_Magna_c7Description
string ls_Id_3
string ls_Cillum_d9Description
string ls_Est_ecDescription
string ls_In_5a4Description
string ls_Ex_b
string ls_Code
string ls_Detail
string ls_Title
string ls_Elapsed
string ls_After
string ls_Request_id
string ls_Status
integer i
integer li_Count_i

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

loo_Http = create oleobject
// Use "Chilkat_9_5_0.Http" for versions of Chilkat < 10.0.0
li_rc = loo_Http.ConnectToNewObject("Chilkat.Http")
if li_rc < 0 then
    destroy loo_Http
    MessageBox("Error","Connecting to COM object failed")
    return
end if

// Use this online tool to generate code from sample JSON: Generate Code to Create JSON

// The following JSON is sent in the request body.

// {
//   "compute": [
//     {
//       "aggregation": "cardinality",
//       "interval": "<string>",
//       "metric": "<string>",
//       "type": "total"
//     },
//     {
//       "aggregation": "cardinality",
//       "interval": "<string>",
//       "metric": "<string>",
//       "type": "total"
//     }
//   ],
//   "filter": {
//     "from": "now-15m",
//     "indexes": [
//       "*"
//     ],
//     "query": "*",
//     "storage_tier": "indexes",
//     "to": "now"
//   },
//   "group_by": [
//     {
//       "facet": "<string>",
//       "histogram": {
//         "interval": "<double>",
//         "min": "<double>",
//         "max": "<double>"
//       },
//       "limit": 10,
//       "missing": "<string>",
//       "sort": {
//         "aggregation": "median",
//         "metric": "<string>",
//         "order": "asc",
//         "type": "alphabetical"
//       },
//       "total": "<boolean>"
//     },
//     {
//       "facet": "<string>",
//       "histogram": {
//         "interval": "<double>",
//         "min": "<double>",
//         "max": "<double>"
//       },
//       "limit": 10,
//       "missing": "<string>",
//       "sort": {
//         "aggregation": "cardinality",
//         "metric": "<string>",
//         "order": "asc",
//         "type": "alphabetical"
//       },
//       "total": "<boolean>"
//     }
//   ],
//   "options": {
//     "timeOffset": "<long>",
//     "timezone": "UTC"
//   },
//   "page": {
//     "cursor": "<string>"
//   }
// }

loo_Json = create oleobject
// Use "Chilkat_9_5_0.JsonObject" for versions of Chilkat < 10.0.0
li_rc = loo_Json.ConnectToNewObject("Chilkat.JsonObject")

loo_Json.UpdateString("compute[0].aggregation","cardinality")
loo_Json.UpdateString("compute[0].interval","<string>")
loo_Json.UpdateString("compute[0].metric","<string>")
loo_Json.UpdateString("compute[0].type","total")
loo_Json.UpdateString("compute[1].aggregation","cardinality")
loo_Json.UpdateString("compute[1].interval","<string>")
loo_Json.UpdateString("compute[1].metric","<string>")
loo_Json.UpdateString("compute[1].type","total")
loo_Json.UpdateString("filter.from","now-15m")
loo_Json.UpdateString("filter.indexes[0]","*")
loo_Json.UpdateString("filter.query","*")
loo_Json.UpdateString("filter.storage_tier","indexes")
loo_Json.UpdateString("filter.to","now")
loo_Json.UpdateString("group_by[0].facet","<string>")
loo_Json.UpdateString("group_by[0].histogram.interval","<double>")
loo_Json.UpdateString("group_by[0].histogram.min","<double>")
loo_Json.UpdateString("group_by[0].histogram.max","<double>")
loo_Json.UpdateInt("group_by[0].limit",10)
loo_Json.UpdateString("group_by[0].missing","<string>")
loo_Json.UpdateString("group_by[0].sort.aggregation","median")
loo_Json.UpdateString("group_by[0].sort.metric","<string>")
loo_Json.UpdateString("group_by[0].sort.order","asc")
loo_Json.UpdateString("group_by[0].sort.type","alphabetical")
loo_Json.UpdateString("group_by[0].total","<boolean>")
loo_Json.UpdateString("group_by[1].facet","<string>")
loo_Json.UpdateString("group_by[1].histogram.interval","<double>")
loo_Json.UpdateString("group_by[1].histogram.min","<double>")
loo_Json.UpdateString("group_by[1].histogram.max","<double>")
loo_Json.UpdateInt("group_by[1].limit",10)
loo_Json.UpdateString("group_by[1].missing","<string>")
loo_Json.UpdateString("group_by[1].sort.aggregation","cardinality")
loo_Json.UpdateString("group_by[1].sort.metric","<string>")
loo_Json.UpdateString("group_by[1].sort.order","asc")
loo_Json.UpdateString("group_by[1].sort.type","alphabetical")
loo_Json.UpdateString("group_by[1].total","<boolean>")
loo_Json.UpdateString("options.timeOffset","<long>")
loo_Json.UpdateString("options.timezone","UTC")
loo_Json.UpdateString("page.cursor","<string>")

loo_Http.SetRequestHeader("Content-Type","application/json")
loo_Http.SetRequestHeader("Accept","application/json")

loo_Resp = loo_Http.PostJson3("https://api.app.ddog-gov.com/api/v2/logs/analytics/aggregate","application/json",loo_Json)
if loo_Http.LastMethodSuccess = 0 then
    Write-Debug loo_Http.LastErrorText
    destroy loo_Http
    destroy loo_Json
    return
end if

loo_SbResponseBody = create oleobject
// Use "Chilkat_9_5_0.StringBuilder" for versions of Chilkat < 10.0.0
li_rc = loo_SbResponseBody.ConnectToNewObject("Chilkat.StringBuilder")

loo_Resp.GetBodySb(loo_SbResponseBody)

loo_JResp = create oleobject
// Use "Chilkat_9_5_0.JsonObject" for versions of Chilkat < 10.0.0
li_rc = loo_JResp.ConnectToNewObject("Chilkat.JsonObject")

loo_JResp.LoadSb(loo_SbResponseBody)
loo_JResp.EmitCompact = 0

Write-Debug "Response Body:"
Write-Debug loo_JResp.Emit()

li_RespStatusCode = loo_Resp.StatusCode
Write-Debug "Response Status Code = " + string(li_RespStatusCode)
if li_RespStatusCode >= 400 then
    Write-Debug "Response Header:"
    Write-Debug loo_Resp.Header
    Write-Debug "Failed."
    destroy loo_Resp
    destroy loo_Http
    destroy loo_Json
    destroy loo_SbResponseBody
    destroy loo_JResp
    return
end if

destroy loo_Resp

// Sample JSON response:
// (Sample code for parsing the JSON response is shown below)

// {
//   "data": {
//     "buckets": [
//       {
//         "by": {
//           "in__11": {
//             "description": "The values for each group by"
//           },
//           "magna_c7": {
//             "description": "The values for each group by"
//           }
//         },
//         "computes": {
//           "id_3": "<string>"
//         }
//       },
//       {
//         "by": {
//           "cillum_d9": {
//             "description": "The values for each group by"
//           },
//           "est_ec": {
//             "description": "The values for each group by"
//           },
//           "in_5a4": {
//             "description": "The values for each group by"
//           }
//         },
//         "computes": {
//           "ex_b": "<string>"
//         }
//       }
//     ]
//   },
//   "meta": {
//     "elapsed": "<long>",
//     "page": {
//       "after": "<string>"
//     },
//     "request_id": "<string>",
//     "status": "done",
//     "warnings": [
//       {
//         "code": "<string>",
//         "detail": "<string>",
//         "title": "<string>"
//       },
//       {
//         "code": "<string>",
//         "detail": "<string>",
//         "title": "<string>"
//       }
//     ]
//   }
// }

// Sample code for parsing the JSON response...
// Use this online tool to generate parsing code from sample JSON: Generate JSON Parsing Code

ls_Elapsed = loo_JResp.StringOf("meta.elapsed")
ls_After = loo_JResp.StringOf("meta.page.after")
ls_Request_id = loo_JResp.StringOf("meta.request_id")
ls_Status = loo_JResp.StringOf("meta.status")
i = 0
li_Count_i = loo_JResp.SizeOfArray("data.buckets")
do while i < li_Count_i
    loo_JResp.I = i
    ls_Description = loo_JResp.StringOf("data.buckets[i].by.in__11.description")
    ls_Magna_c7Description = loo_JResp.StringOf("data.buckets[i].by.magna_c7.description")
    ls_Id_3 = loo_JResp.StringOf("data.buckets[i].computes.id_3")
    ls_Cillum_d9Description = loo_JResp.StringOf("data.buckets[i].by.cillum_d9.description")
    ls_Est_ecDescription = loo_JResp.StringOf("data.buckets[i].by.est_ec.description")
    ls_In_5a4Description = loo_JResp.StringOf("data.buckets[i].by.in_5a4.description")
    ls_Ex_b = loo_JResp.StringOf("data.buckets[i].computes.ex_b")
    i = i + 1
loop
i = 0
li_Count_i = loo_JResp.SizeOfArray("meta.warnings")
do while i < li_Count_i
    loo_JResp.I = i
    ls_Code = loo_JResp.StringOf("meta.warnings[i].code")
    ls_Detail = loo_JResp.StringOf("meta.warnings[i].detail")
    ls_Title = loo_JResp.StringOf("meta.warnings[i].title")
    i = i + 1
loop


destroy loo_Http
destroy loo_Json
destroy loo_SbResponseBody
destroy loo_JResp

Curl Command

curl -X POST
	-H "Content-Type: application/json"
	-H "Accept: application/json"
	-d '{
  "compute": [
    {
      "aggregation": "cardinality",
      "interval": "<string>",
      "metric": "<string>",
      "type": "total"
    },
    {
      "aggregation": "cardinality",
      "interval": "<string>",
      "metric": "<string>",
      "type": "total"
    }
  ],
  "filter": {
    "from": "now-15m",
    "indexes": [
      "*"
    ],
    "query": "*",
    "storage_tier": "indexes",
    "to": "now"
  },
  "group_by": [
    {
      "facet": "<string>",
      "histogram": {
        "interval": "<double>",
        "min": "<double>",
        "max": "<double>"
      },
      "limit": 10,
      "missing": "<string>",
      "sort": {
        "aggregation": "median",
        "metric": "<string>",
        "order": "asc",
        "type": "alphabetical"
      },
      "total": "<boolean>"
    },
    {
      "facet": "<string>",
      "histogram": {
        "interval": "<double>",
        "min": "<double>",
        "max": "<double>"
      },
      "limit": 10,
      "missing": "<string>",
      "sort": {
        "aggregation": "cardinality",
        "metric": "<string>",
        "order": "asc",
        "type": "alphabetical"
      },
      "total": "<boolean>"
    }
  ],
  "options": {
    "timeOffset": "<long>",
    "timezone": "UTC"
  },
  "page": {
    "cursor": "<string>"
  }
}'
https://api.app.ddog-gov.com/api/v2/logs/analytics/aggregate

Postman Collection Item JSON

{
  "name": "Aggregate events",
  "request": {
    "method": "POST",
    "header": [
      {
        "key": "Content-Type",
        "value": "application/json"
      },
      {
        "key": "Accept",
        "value": "application/json"
      }
    ],
    "body": {
      "mode": "raw",
      "raw": "{\n  \"compute\": [\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    },\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    }\n  ],\n  \"filter\": {\n    \"from\": \"now-15m\",\n    \"indexes\": [\n      \"*\"\n    ],\n    \"query\": \"*\",\n    \"storage_tier\": \"indexes\",\n    \"to\": \"now\"\n  },\n  \"group_by\": [\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"median\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    },\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"cardinality\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    }\n  ],\n  \"options\": {\n    \"timeOffset\": \"<long>\",\n    \"timezone\": \"UTC\"\n  },\n  \"page\": {\n    \"cursor\": \"<string>\"\n  }\n}",
      "options": {
        "raw": {
          "headerFamily": "json",
          "language": "json"
        }
      }
    },
    "url": {
      "raw": "{{baseUrl}}/api/v2/logs/analytics/aggregate",
      "host": [
        "{{baseUrl}}"
      ],
      "path": [
        "api",
        "v2",
        "logs",
        "analytics",
        "aggregate"
      ]
    },
    "description": "The API endpoint to aggregate events into buckets and compute metrics and timeseries."
  },
  "response": [
    {
      "name": "OK",
      "originalRequest": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Accept",
            "value": "application/json"
          },
          {
            "description": "Added as a part of security scheme: apikey",
            "key": "DD-API-KEY",
            "value": "<API Key>"
          }
        ],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"compute\": [\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    },\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    }\n  ],\n  \"filter\": {\n    \"from\": \"now-15m\",\n    \"indexes\": [\n      \"*\"\n    ],\n    \"query\": \"*\",\n    \"storage_tier\": \"indexes\",\n    \"to\": \"now\"\n  },\n  \"group_by\": [\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"median\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    },\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"cardinality\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    }\n  ],\n  \"options\": {\n    \"timeOffset\": \"<long>\",\n    \"timezone\": \"UTC\"\n  },\n  \"page\": {\n    \"cursor\": \"<string>\"\n  }\n}",
          "options": {
            "raw": {
              "headerFamily": "json",
              "language": "json"
            }
          }
        },
        "url": {
          "raw": "{{baseUrl}}/api/v2/logs/analytics/aggregate",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "api",
            "v2",
            "logs",
            "analytics",
            "aggregate"
          ]
        }
      },
      "status": "OK",
      "code": 200,
      "_postman_previewlanguage": "json",
      "header": [
        {
          "key": "Content-Type",
          "value": "application/json"
        }
      ],
      "cookie": [
      ],
      "body": "{\n  \"data\": {\n    \"buckets\": [\n      {\n        \"by\": {\n          \"in__11\": {\n            \"description\": \"The values for each group by\"\n          },\n          \"magna_c7\": {\n            \"description\": \"The values for each group by\"\n          }\n        },\n        \"computes\": {\n          \"id_3\": \"<string>\"\n        }\n      },\n      {\n        \"by\": {\n          \"cillum_d9\": {\n            \"description\": \"The values for each group by\"\n          },\n          \"est_ec\": {\n            \"description\": \"The values for each group by\"\n          },\n          \"in_5a4\": {\n            \"description\": \"The values for each group by\"\n          }\n        },\n        \"computes\": {\n          \"ex_b\": \"<string>\"\n        }\n      }\n    ]\n  },\n  \"meta\": {\n    \"elapsed\": \"<long>\",\n    \"page\": {\n      \"after\": \"<string>\"\n    },\n    \"request_id\": \"<string>\",\n    \"status\": \"done\",\n    \"warnings\": [\n      {\n        \"code\": \"<string>\",\n        \"detail\": \"<string>\",\n        \"title\": \"<string>\"\n      },\n      {\n        \"code\": \"<string>\",\n        \"detail\": \"<string>\",\n        \"title\": \"<string>\"\n      }\n    ]\n  }\n}"
    },
    {
      "name": "Bad Request",
      "originalRequest": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Accept",
            "value": "application/json"
          },
          {
            "description": "Added as a part of security scheme: apikey",
            "key": "DD-API-KEY",
            "value": "<API Key>"
          }
        ],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"compute\": [\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    },\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    }\n  ],\n  \"filter\": {\n    \"from\": \"now-15m\",\n    \"indexes\": [\n      \"*\"\n    ],\n    \"query\": \"*\",\n    \"storage_tier\": \"indexes\",\n    \"to\": \"now\"\n  },\n  \"group_by\": [\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"median\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    },\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"cardinality\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    }\n  ],\n  \"options\": {\n    \"timeOffset\": \"<long>\",\n    \"timezone\": \"UTC\"\n  },\n  \"page\": {\n    \"cursor\": \"<string>\"\n  }\n}",
          "options": {
            "raw": {
              "headerFamily": "json",
              "language": "json"
            }
          }
        },
        "url": {
          "raw": "{{baseUrl}}/api/v2/logs/analytics/aggregate",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "api",
            "v2",
            "logs",
            "analytics",
            "aggregate"
          ]
        }
      },
      "status": "Bad Request",
      "code": 400,
      "_postman_previewlanguage": "json",
      "header": [
        {
          "key": "Content-Type",
          "value": "application/json"
        }
      ],
      "cookie": [
      ],
      "body": "{\n  \"errors\": [\n    \"<string>\",\n    \"<string>\"\n  ]\n}"
    },
    {
      "name": "Not Authorized",
      "originalRequest": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Accept",
            "value": "application/json"
          },
          {
            "description": "Added as a part of security scheme: apikey",
            "key": "DD-API-KEY",
            "value": "<API Key>"
          }
        ],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"compute\": [\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    },\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    }\n  ],\n  \"filter\": {\n    \"from\": \"now-15m\",\n    \"indexes\": [\n      \"*\"\n    ],\n    \"query\": \"*\",\n    \"storage_tier\": \"indexes\",\n    \"to\": \"now\"\n  },\n  \"group_by\": [\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"median\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    },\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"cardinality\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    }\n  ],\n  \"options\": {\n    \"timeOffset\": \"<long>\",\n    \"timezone\": \"UTC\"\n  },\n  \"page\": {\n    \"cursor\": \"<string>\"\n  }\n}",
          "options": {
            "raw": {
              "headerFamily": "json",
              "language": "json"
            }
          }
        },
        "url": {
          "raw": "{{baseUrl}}/api/v2/logs/analytics/aggregate",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "api",
            "v2",
            "logs",
            "analytics",
            "aggregate"
          ]
        }
      },
      "status": "Forbidden",
      "code": 403,
      "_postman_previewlanguage": "json",
      "header": [
        {
          "key": "Content-Type",
          "value": "application/json"
        }
      ],
      "cookie": [
      ],
      "body": "{\n  \"errors\": [\n    \"<string>\",\n    \"<string>\"\n  ]\n}"
    },
    {
      "name": "Too many requests",
      "originalRequest": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Accept",
            "value": "application/json"
          },
          {
            "description": "Added as a part of security scheme: apikey",
            "key": "DD-API-KEY",
            "value": "<API Key>"
          }
        ],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"compute\": [\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    },\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    }\n  ],\n  \"filter\": {\n    \"from\": \"now-15m\",\n    \"indexes\": [\n      \"*\"\n    ],\n    \"query\": \"*\",\n    \"storage_tier\": \"indexes\",\n    \"to\": \"now\"\n  },\n  \"group_by\": [\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"median\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    },\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"cardinality\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    }\n  ],\n  \"options\": {\n    \"timeOffset\": \"<long>\",\n    \"timezone\": \"UTC\"\n  },\n  \"page\": {\n    \"cursor\": \"<string>\"\n  }\n}",
          "options": {
            "raw": {
              "headerFamily": "json",
              "language": "json"
            }
          }
        },
        "url": {
          "raw": "{{baseUrl}}/api/v2/logs/analytics/aggregate",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "api",
            "v2",
            "logs",
            "analytics",
            "aggregate"
          ]
        }
      },
      "status": "Too Many Requests",
      "code": 429,
      "_postman_previewlanguage": "json",
      "header": [
        {
          "key": "Content-Type",
          "value": "application/json"
        }
      ],
      "cookie": [
      ],
      "body": "{\n  \"errors\": [\n    \"<string>\",\n    \"<string>\"\n  ]\n}"
    }
  ]
}