Can I Get Graylog search results count via API

[masha-pl (Maria)]

Hi!

I need to get a count of messages in search results for certain query via API?
Is it real?

[Ponet (Jesse Hills)]

Yes, you can.

Look at the /search/universal/relative and /search/universal/absolute JSON API calls.

At the bottom of the returned JSON, there is the field total_results which is what I believe you’re looking for.

[shoothub]

Check my previous post, how to search using curl and API:

API Search Example

Try to use this curl command: curl -u admin:password -H 'X-Requested-By: cli' "http://GRAYLOG_IP_OR_HOSTNAME/api/search/universal/relative?query=*&range=3600&limit=100&sort=timestamp:desc&pretty=true" -H "Accept: application/json" -H "Content-Type: application/json" Where: query=* - replace * with your desired string range=3600 - replace 3600 with time range (in seconds) limit=100 - replace 100 with number of returned results sort=timestamp:desc - replace timestamp:desc with field you wan…