How to do aggregation by API in 4.x

[gsmith]

Hello,
To help us, help you better we would need some more information. Check out this post for a better understanding .

How to Post a Question in the Community that Gets Responses

This platform is made with love for community discussions on the open source tool Graylog, it components and usage. Here’s a Graylog support-inspired template (thank you, @aaronsachs ) that’ll get responses: Description of your problem <!-- Use this section to describe the problem that you're encountering. Please include any screenshots or recordings of the problem you're running into.--> Description of steps you’ve taken to attempt to solve the issue <!-- Use this section to provide detail…

Perhaps something in this post might help

How to search messages using REST API

I am trying to use REST API for searching through messages. I need to search message containing some string. I followed the document, created the token and able to access APIs. [apis] I dont know how exactly use this APIs. Should I need to create query first or something else? Can someone give me example endpoint so that I can search messages with any string.

Graylog4 rest api search export

he search via API is different in 4.0 and the documentation lacks behind … The “best” way currently is to use the export API: ## Search via Export API curl -X "POST" "https://graylog/api/views/search/messages" \ -H 'X-Requested-By: Mamamia' \ -H 'Content-Type: application/json' \ -H 'Accept: text/csv' \ -u 'USER:PASSWORD' \ -d $'{ "streams": [ "5e569003c793163fea1b3373" ], "query_string": { "type": "elasticsearch", "query_string": "section:boulder" …