Which API query to use to count logs

Templates and Rules Exchange JSON Templates
,
1 
Hello, everyone,
I haven't been using Graylog for longPreformatted text. Now I have it set up and can monitor four servers. I would now like to use the API to query whether a server has written log files in the last few hours. Not more.
I'm currently trying the "views/search" query. I have already shortened the code to the bare essentials. Now I have a few questions. Can I even use the query for this? How do I enter query_string? for example: "agent_name:abcd\efgh\-u05".

Which IDs do I have to enter at the positions?

I would be very happy about helpful answers.


This is my code:
{
  "queries" : [
  {
      "query" : 
      {
        "type" : "elasticsearch",
        "query_string" : "*"
      },
      "id" : "4d640ed0f61211ecb1a7005056870c0e",
      "timerange" : 
      {
        "type": "relative",
        "range": 600
      }
  }
  ],
  "id" : "5ff438549150ddc6b4ce5319"
}
2

Hello && welcome @UserIT529

Not sure exactly what you doing or version you have but try using Graylogs API Dashboard. It located
under System/Nodes

image
image705×164 3.86 KB

From there you can get you ID’s, etc…

3

Thank you, for your answer!
But on your screenshot I can´t see any ID´s… I mean the ID´s in the Code. Where can I find them?

4

Hello,

You may want to look at this document.