Chilkat Online Tools

SQL Server / Datadog API Collection / Aggregate events

Back to Collection Items

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    DECLARE @iTmp0 int
    -- Important: Do not use nvarchar(max).  See the warning about using nvarchar(max).
    DECLARE @sTmp0 nvarchar(4000)
    -- This example assumes the Chilkat API to have been previously unlocked.
    -- See Global Unlock Sample for sample code.

    DECLARE @http int
    EXEC @hr = sp_OACreate 'Chilkat_9_5_0.Http', @http OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    DECLARE @success int

    -- Use this online tool to generate code from sample JSON: Generate Code to Create JSON

    -- The following JSON is sent in the request body.

    -- {
    --   "compute": [
    --     {
    --       "aggregation": "cardinality",
    --       "interval": "<string>",
    --       "metric": "<string>",
    --       "type": "total"
    --     },
    --     {
    --       "aggregation": "cardinality",
    --       "interval": "<string>",
    --       "metric": "<string>",
    --       "type": "total"
    --     }
    --   ],
    --   "filter": {
    --     "from": "now-15m",
    --     "indexes": [
    --       "*"
    --     ],
    --     "query": "*",
    --     "storage_tier": "indexes",
    --     "to": "now"
    --   },
    --   "group_by": [
    --     {
    --       "facet": "<string>",
    --       "histogram": {
    --         "interval": "<double>",
    --         "min": "<double>",
    --         "max": "<double>"
    --       },
    --       "limit": 10,
    --       "missing": "<string>",
    --       "sort": {
    --         "aggregation": "median",
    --         "metric": "<string>",
    --         "order": "asc",
    --         "type": "alphabetical"
    --       },
    --       "total": "<boolean>"
    --     },
    --     {
    --       "facet": "<string>",
    --       "histogram": {
    --         "interval": "<double>",
    --         "min": "<double>",
    --         "max": "<double>"
    --       },
    --       "limit": 10,
    --       "missing": "<string>",
    --       "sort": {
    --         "aggregation": "cardinality",
    --         "metric": "<string>",
    --         "order": "asc",
    --         "type": "alphabetical"
    --       },
    --       "total": "<boolean>"
    --     }
    --   ],
    --   "options": {
    --     "timeOffset": "<long>",
    --     "timezone": "UTC"
    --   },
    --   "page": {
    --     "cursor": "<string>"
    --   }
    -- }

    DECLARE @json int
    EXEC @hr = sp_OACreate 'Chilkat_9_5_0.JsonObject', @json OUT

    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'compute[0].aggregation', 'cardinality'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'compute[0].interval', '<string>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'compute[0].metric', '<string>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'compute[0].type', 'total'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'compute[1].aggregation', 'cardinality'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'compute[1].interval', '<string>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'compute[1].metric', '<string>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'compute[1].type', 'total'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'filter.from', 'now-15m'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'filter.indexes[0]', '*'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'filter.query', '*'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'filter.storage_tier', 'indexes'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'filter.to', 'now'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[0].facet', '<string>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[0].histogram.interval', '<double>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[0].histogram.min', '<double>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[0].histogram.max', '<double>'
    EXEC sp_OAMethod @json, 'UpdateInt', @success OUT, 'group_by[0].limit', 10
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[0].missing', '<string>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[0].sort.aggregation', 'median'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[0].sort.metric', '<string>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[0].sort.order', 'asc'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[0].sort.type', 'alphabetical'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[0].total', '<boolean>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[1].facet', '<string>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[1].histogram.interval', '<double>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[1].histogram.min', '<double>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[1].histogram.max', '<double>'
    EXEC sp_OAMethod @json, 'UpdateInt', @success OUT, 'group_by[1].limit', 10
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[1].missing', '<string>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[1].sort.aggregation', 'cardinality'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[1].sort.metric', '<string>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[1].sort.order', 'asc'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[1].sort.type', 'alphabetical'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'group_by[1].total', '<boolean>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'options.timeOffset', '<long>'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'options.timezone', 'UTC'
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'page.cursor', '<string>'

    EXEC sp_OAMethod @http, 'SetRequestHeader', NULL, 'Content-Type', 'application/json'
    EXEC sp_OAMethod @http, 'SetRequestHeader', NULL, 'Accept', 'application/json'

    DECLARE @resp int
    EXEC sp_OAMethod @http, 'PostJson3', @resp OUT, 'https://api.app.ddog-gov.com/api/v2/logs/analytics/aggregate', 'application/json', @json
    EXEC sp_OAGetProperty @http, 'LastMethodSuccess', @iTmp0 OUT
    IF @iTmp0 = 0
      BEGIN
        EXEC sp_OAGetProperty @http, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @http
        EXEC @hr = sp_OADestroy @json
        RETURN
      END

    DECLARE @sbResponseBody int
    EXEC @hr = sp_OACreate 'Chilkat_9_5_0.StringBuilder', @sbResponseBody OUT

    EXEC sp_OAMethod @resp, 'GetBodySb', @success OUT, @sbResponseBody

    DECLARE @jResp int
    EXEC @hr = sp_OACreate 'Chilkat_9_5_0.JsonObject', @jResp OUT

    EXEC sp_OAMethod @jResp, 'LoadSb', @success OUT, @sbResponseBody
    EXEC sp_OASetProperty @jResp, 'EmitCompact', 0


    PRINT 'Response Body:'
    EXEC sp_OAMethod @jResp, 'Emit', @sTmp0 OUT
    PRINT @sTmp0

    DECLARE @respStatusCode int
    EXEC sp_OAGetProperty @resp, 'StatusCode', @respStatusCode OUT

    PRINT 'Response Status Code = ' + @respStatusCode
    IF @respStatusCode >= 400
      BEGIN

        PRINT 'Response Header:'
        EXEC sp_OAGetProperty @resp, 'Header', @sTmp0 OUT
        PRINT @sTmp0

        PRINT 'Failed.'
        EXEC @hr = sp_OADestroy @resp

        EXEC @hr = sp_OADestroy @http
        EXEC @hr = sp_OADestroy @json
        EXEC @hr = sp_OADestroy @sbResponseBody
        EXEC @hr = sp_OADestroy @jResp
        RETURN
      END
    EXEC @hr = sp_OADestroy @resp

    -- Sample JSON response:
    -- (Sample code for parsing the JSON response is shown below)

    -- {
    --   "data": {
    --     "buckets": [
    --       {
    --         "by": {
    --           "in__11": {
    --             "description": "The values for each group by"
    --           },
    --           "magna_c7": {
    --             "description": "The values for each group by"
    --           }
    --         },
    --         "computes": {
    --           "id_3": "<string>"
    --         }
    --       },
    --       {
    --         "by": {
    --           "cillum_d9": {
    --             "description": "The values for each group by"
    --           },
    --           "est_ec": {
    --             "description": "The values for each group by"
    --           },
    --           "in_5a4": {
    --             "description": "The values for each group by"
    --           }
    --         },
    --         "computes": {
    --           "ex_b": "<string>"
    --         }
    --       }
    --     ]
    --   },
    --   "meta": {
    --     "elapsed": "<long>",
    --     "page": {
    --       "after": "<string>"
    --     },
    --     "request_id": "<string>",
    --     "status": "done",
    --     "warnings": [
    --       {
    --         "code": "<string>",
    --         "detail": "<string>",
    --         "title": "<string>"
    --       },
    --       {
    --         "code": "<string>",
    --         "detail": "<string>",
    --         "title": "<string>"
    --       }
    --     ]
    --   }
    -- }

    -- Sample code for parsing the JSON response...
    -- Use this online tool to generate parsing code from sample JSON: Generate JSON Parsing Code

    DECLARE @Description nvarchar(4000)

    DECLARE @Magna_c7Description nvarchar(4000)

    DECLARE @Id_3 nvarchar(4000)

    DECLARE @Cillum_d9Description nvarchar(4000)

    DECLARE @Est_ecDescription nvarchar(4000)

    DECLARE @In_5a4Description nvarchar(4000)

    DECLARE @Ex_b nvarchar(4000)

    DECLARE @code nvarchar(4000)

    DECLARE @detail nvarchar(4000)

    DECLARE @title nvarchar(4000)

    DECLARE @Elapsed nvarchar(4000)
    EXEC sp_OAMethod @jResp, 'StringOf', @Elapsed OUT, 'meta.elapsed'
    DECLARE @After nvarchar(4000)
    EXEC sp_OAMethod @jResp, 'StringOf', @After OUT, 'meta.page.after'
    DECLARE @Request_id nvarchar(4000)
    EXEC sp_OAMethod @jResp, 'StringOf', @Request_id OUT, 'meta.request_id'
    DECLARE @Status nvarchar(4000)
    EXEC sp_OAMethod @jResp, 'StringOf', @Status OUT, 'meta.status'
    DECLARE @i int
    SELECT @i = 0
    DECLARE @count_i int
    EXEC sp_OAMethod @jResp, 'SizeOfArray', @count_i OUT, 'data.buckets'
    WHILE @i < @count_i
      BEGIN
        EXEC sp_OASetProperty @jResp, 'I', @i
        EXEC sp_OAMethod @jResp, 'StringOf', @Description OUT, 'data.buckets[i].by.in__11.description'
        EXEC sp_OAMethod @jResp, 'StringOf', @Magna_c7Description OUT, 'data.buckets[i].by.magna_c7.description'
        EXEC sp_OAMethod @jResp, 'StringOf', @Id_3 OUT, 'data.buckets[i].computes.id_3'
        EXEC sp_OAMethod @jResp, 'StringOf', @Cillum_d9Description OUT, 'data.buckets[i].by.cillum_d9.description'
        EXEC sp_OAMethod @jResp, 'StringOf', @Est_ecDescription OUT, 'data.buckets[i].by.est_ec.description'
        EXEC sp_OAMethod @jResp, 'StringOf', @In_5a4Description OUT, 'data.buckets[i].by.in_5a4.description'
        EXEC sp_OAMethod @jResp, 'StringOf', @Ex_b OUT, 'data.buckets[i].computes.ex_b'
        SELECT @i = @i + 1
      END
    SELECT @i = 0
    EXEC sp_OAMethod @jResp, 'SizeOfArray', @count_i OUT, 'meta.warnings'
    WHILE @i < @count_i
      BEGIN
        EXEC sp_OASetProperty @jResp, 'I', @i
        EXEC sp_OAMethod @jResp, 'StringOf', @code OUT, 'meta.warnings[i].code'
        EXEC sp_OAMethod @jResp, 'StringOf', @detail OUT, 'meta.warnings[i].detail'
        EXEC sp_OAMethod @jResp, 'StringOf', @title OUT, 'meta.warnings[i].title'
        SELECT @i = @i + 1
      END

    EXEC @hr = sp_OADestroy @http
    EXEC @hr = sp_OADestroy @json
    EXEC @hr = sp_OADestroy @sbResponseBody
    EXEC @hr = sp_OADestroy @jResp


END
GO

Curl Command

curl -X POST
	-H "Content-Type: application/json"
	-H "Accept: application/json"
	-d '{
  "compute": [
    {
      "aggregation": "cardinality",
      "interval": "<string>",
      "metric": "<string>",
      "type": "total"
    },
    {
      "aggregation": "cardinality",
      "interval": "<string>",
      "metric": "<string>",
      "type": "total"
    }
  ],
  "filter": {
    "from": "now-15m",
    "indexes": [
      "*"
    ],
    "query": "*",
    "storage_tier": "indexes",
    "to": "now"
  },
  "group_by": [
    {
      "facet": "<string>",
      "histogram": {
        "interval": "<double>",
        "min": "<double>",
        "max": "<double>"
      },
      "limit": 10,
      "missing": "<string>",
      "sort": {
        "aggregation": "median",
        "metric": "<string>",
        "order": "asc",
        "type": "alphabetical"
      },
      "total": "<boolean>"
    },
    {
      "facet": "<string>",
      "histogram": {
        "interval": "<double>",
        "min": "<double>",
        "max": "<double>"
      },
      "limit": 10,
      "missing": "<string>",
      "sort": {
        "aggregation": "cardinality",
        "metric": "<string>",
        "order": "asc",
        "type": "alphabetical"
      },
      "total": "<boolean>"
    }
  ],
  "options": {
    "timeOffset": "<long>",
    "timezone": "UTC"
  },
  "page": {
    "cursor": "<string>"
  }
}'
https://api.app.ddog-gov.com/api/v2/logs/analytics/aggregate

Postman Collection Item JSON

{
  "name": "Aggregate events",
  "request": {
    "method": "POST",
    "header": [
      {
        "key": "Content-Type",
        "value": "application/json"
      },
      {
        "key": "Accept",
        "value": "application/json"
      }
    ],
    "body": {
      "mode": "raw",
      "raw": "{\n  \"compute\": [\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    },\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    }\n  ],\n  \"filter\": {\n    \"from\": \"now-15m\",\n    \"indexes\": [\n      \"*\"\n    ],\n    \"query\": \"*\",\n    \"storage_tier\": \"indexes\",\n    \"to\": \"now\"\n  },\n  \"group_by\": [\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"median\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    },\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"cardinality\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    }\n  ],\n  \"options\": {\n    \"timeOffset\": \"<long>\",\n    \"timezone\": \"UTC\"\n  },\n  \"page\": {\n    \"cursor\": \"<string>\"\n  }\n}",
      "options": {
        "raw": {
          "headerFamily": "json",
          "language": "json"
        }
      }
    },
    "url": {
      "raw": "{{baseUrl}}/api/v2/logs/analytics/aggregate",
      "host": [
        "{{baseUrl}}"
      ],
      "path": [
        "api",
        "v2",
        "logs",
        "analytics",
        "aggregate"
      ]
    },
    "description": "The API endpoint to aggregate events into buckets and compute metrics and timeseries."
  },
  "response": [
    {
      "name": "OK",
      "originalRequest": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Accept",
            "value": "application/json"
          },
          {
            "description": "Added as a part of security scheme: apikey",
            "key": "DD-API-KEY",
            "value": "<API Key>"
          }
        ],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"compute\": [\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    },\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    }\n  ],\n  \"filter\": {\n    \"from\": \"now-15m\",\n    \"indexes\": [\n      \"*\"\n    ],\n    \"query\": \"*\",\n    \"storage_tier\": \"indexes\",\n    \"to\": \"now\"\n  },\n  \"group_by\": [\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"median\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    },\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"cardinality\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    }\n  ],\n  \"options\": {\n    \"timeOffset\": \"<long>\",\n    \"timezone\": \"UTC\"\n  },\n  \"page\": {\n    \"cursor\": \"<string>\"\n  }\n}",
          "options": {
            "raw": {
              "headerFamily": "json",
              "language": "json"
            }
          }
        },
        "url": {
          "raw": "{{baseUrl}}/api/v2/logs/analytics/aggregate",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "api",
            "v2",
            "logs",
            "analytics",
            "aggregate"
          ]
        }
      },
      "status": "OK",
      "code": 200,
      "_postman_previewlanguage": "json",
      "header": [
        {
          "key": "Content-Type",
          "value": "application/json"
        }
      ],
      "cookie": [
      ],
      "body": "{\n  \"data\": {\n    \"buckets\": [\n      {\n        \"by\": {\n          \"in__11\": {\n            \"description\": \"The values for each group by\"\n          },\n          \"magna_c7\": {\n            \"description\": \"The values for each group by\"\n          }\n        },\n        \"computes\": {\n          \"id_3\": \"<string>\"\n        }\n      },\n      {\n        \"by\": {\n          \"cillum_d9\": {\n            \"description\": \"The values for each group by\"\n          },\n          \"est_ec\": {\n            \"description\": \"The values for each group by\"\n          },\n          \"in_5a4\": {\n            \"description\": \"The values for each group by\"\n          }\n        },\n        \"computes\": {\n          \"ex_b\": \"<string>\"\n        }\n      }\n    ]\n  },\n  \"meta\": {\n    \"elapsed\": \"<long>\",\n    \"page\": {\n      \"after\": \"<string>\"\n    },\n    \"request_id\": \"<string>\",\n    \"status\": \"done\",\n    \"warnings\": [\n      {\n        \"code\": \"<string>\",\n        \"detail\": \"<string>\",\n        \"title\": \"<string>\"\n      },\n      {\n        \"code\": \"<string>\",\n        \"detail\": \"<string>\",\n        \"title\": \"<string>\"\n      }\n    ]\n  }\n}"
    },
    {
      "name": "Bad Request",
      "originalRequest": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Accept",
            "value": "application/json"
          },
          {
            "description": "Added as a part of security scheme: apikey",
            "key": "DD-API-KEY",
            "value": "<API Key>"
          }
        ],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"compute\": [\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    },\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    }\n  ],\n  \"filter\": {\n    \"from\": \"now-15m\",\n    \"indexes\": [\n      \"*\"\n    ],\n    \"query\": \"*\",\n    \"storage_tier\": \"indexes\",\n    \"to\": \"now\"\n  },\n  \"group_by\": [\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"median\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    },\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"cardinality\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    }\n  ],\n  \"options\": {\n    \"timeOffset\": \"<long>\",\n    \"timezone\": \"UTC\"\n  },\n  \"page\": {\n    \"cursor\": \"<string>\"\n  }\n}",
          "options": {
            "raw": {
              "headerFamily": "json",
              "language": "json"
            }
          }
        },
        "url": {
          "raw": "{{baseUrl}}/api/v2/logs/analytics/aggregate",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "api",
            "v2",
            "logs",
            "analytics",
            "aggregate"
          ]
        }
      },
      "status": "Bad Request",
      "code": 400,
      "_postman_previewlanguage": "json",
      "header": [
        {
          "key": "Content-Type",
          "value": "application/json"
        }
      ],
      "cookie": [
      ],
      "body": "{\n  \"errors\": [\n    \"<string>\",\n    \"<string>\"\n  ]\n}"
    },
    {
      "name": "Not Authorized",
      "originalRequest": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Accept",
            "value": "application/json"
          },
          {
            "description": "Added as a part of security scheme: apikey",
            "key": "DD-API-KEY",
            "value": "<API Key>"
          }
        ],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"compute\": [\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    },\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    }\n  ],\n  \"filter\": {\n    \"from\": \"now-15m\",\n    \"indexes\": [\n      \"*\"\n    ],\n    \"query\": \"*\",\n    \"storage_tier\": \"indexes\",\n    \"to\": \"now\"\n  },\n  \"group_by\": [\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"median\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    },\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"cardinality\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    }\n  ],\n  \"options\": {\n    \"timeOffset\": \"<long>\",\n    \"timezone\": \"UTC\"\n  },\n  \"page\": {\n    \"cursor\": \"<string>\"\n  }\n}",
          "options": {
            "raw": {
              "headerFamily": "json",
              "language": "json"
            }
          }
        },
        "url": {
          "raw": "{{baseUrl}}/api/v2/logs/analytics/aggregate",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "api",
            "v2",
            "logs",
            "analytics",
            "aggregate"
          ]
        }
      },
      "status": "Forbidden",
      "code": 403,
      "_postman_previewlanguage": "json",
      "header": [
        {
          "key": "Content-Type",
          "value": "application/json"
        }
      ],
      "cookie": [
      ],
      "body": "{\n  \"errors\": [\n    \"<string>\",\n    \"<string>\"\n  ]\n}"
    },
    {
      "name": "Too many requests",
      "originalRequest": {
        "method": "POST",
        "header": [
          {
            "key": "Content-Type",
            "value": "application/json"
          },
          {
            "key": "Accept",
            "value": "application/json"
          },
          {
            "description": "Added as a part of security scheme: apikey",
            "key": "DD-API-KEY",
            "value": "<API Key>"
          }
        ],
        "body": {
          "mode": "raw",
          "raw": "{\n  \"compute\": [\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    },\n    {\n      \"aggregation\": \"cardinality\",\n      \"interval\": \"<string>\",\n      \"metric\": \"<string>\",\n      \"type\": \"total\"\n    }\n  ],\n  \"filter\": {\n    \"from\": \"now-15m\",\n    \"indexes\": [\n      \"*\"\n    ],\n    \"query\": \"*\",\n    \"storage_tier\": \"indexes\",\n    \"to\": \"now\"\n  },\n  \"group_by\": [\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"median\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    },\n    {\n      \"facet\": \"<string>\",\n      \"histogram\": {\n        \"interval\": \"<double>\",\n        \"min\": \"<double>\",\n        \"max\": \"<double>\"\n      },\n      \"limit\": 10,\n      \"missing\": \"<string>\",\n      \"sort\": {\n        \"aggregation\": \"cardinality\",\n        \"metric\": \"<string>\",\n        \"order\": \"asc\",\n        \"type\": \"alphabetical\"\n      },\n      \"total\": \"<boolean>\"\n    }\n  ],\n  \"options\": {\n    \"timeOffset\": \"<long>\",\n    \"timezone\": \"UTC\"\n  },\n  \"page\": {\n    \"cursor\": \"<string>\"\n  }\n}",
          "options": {
            "raw": {
              "headerFamily": "json",
              "language": "json"
            }
          }
        },
        "url": {
          "raw": "{{baseUrl}}/api/v2/logs/analytics/aggregate",
          "host": [
            "{{baseUrl}}"
          ],
          "path": [
            "api",
            "v2",
            "logs",
            "analytics",
            "aggregate"
          ]
        }
      },
      "status": "Too Many Requests",
      "code": 429,
      "_postman_previewlanguage": "json",
      "header": [
        {
          "key": "Content-Type",
          "value": "application/json"
        }
      ],
      "cookie": [
      ],
      "body": "{\n  \"errors\": [\n    \"<string>\",\n    \"<string>\"\n  ]\n}"
    }
  ]
}