SolarWinds Search API

openapi: 3.1.0
info:
  title: SolarWinds Loggly Account Search API
  description: RESTful API for cloud-based log management including event submission, event retrieval, search, and account management. Supports sending events over HTTP/S and retrieving log data via paginating event retrieval endpoints.
  version: '2'
  contact:
    name: SolarWinds Support
    url: https://support.solarwinds.com
  termsOfService: https://www.solarwinds.com/legal/terms
servers:
- url: https://{subdomain}.loggly.com/apiv2
  description: Loggly API Server
  variables:
    subdomain:
      default: logs-01
      description: Your Loggly subdomain
security:
- bearerAuth: []
tags:
- name: Search
  description: Search and retrieve log events
paths:
  /search:
    get:
      operationId: searchEvents
      summary: Solarwinds Initiate a Search Query
      description: Initiates a search query against log events. Returns a search ID (RSID) that can be used with the events endpoint to retrieve results.
      tags:
      - Search
      parameters:
      - name: q
        in: query
        required: true
        description: Search query string using Loggly search syntax
        schema:
          type: string
        example: '*'
      - name: from
        in: query
        description: Start time for search (ISO 8601 or relative like -24h)
        schema:
          type: string
        example: -2h
      - name: until
        in: query
        description: End time for search
        schema:
          type: string
        example: now
      - name: size
        in: query
        description: Maximum number of events to return
        schema:
          type: integer
          default: 10
          maximum: 5000
        example: 10
      - name: order
        in: query
        description: Sort order
        schema:
          type: string
          enum:
          - asc
          - desc
        example: asc
      responses:
        '200':
          description: Search initiated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SearchResponse'
              examples:
                Searchevents200Example:
                  summary: Default searchEvents 200 response
                  x-microcks-default: true
                  value:
                    rsid:
                      id: abc123
                      status: example_value
        '401':
          description: Unauthorized
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /events:
    get:
      operationId: getEvents
      summary: Solarwinds Retrieve Search Results
      description: Retrieves events for a previously initiated search using the RSID returned by the search endpoint.
      tags:
      - Search
      parameters:
      - name: rsid
        in: query
        required: true
        description: Result Set ID from the search endpoint
        schema:
          type: string
        example: '500123'
      responses:
        '200':
          description: Event results
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EventsResponse'
              examples:
                Getevents200Example:
                  summary: Default getEvents 200 response
                  x-microcks-default: true
                  value:
                    total_events: 10
                    page: 10
                    events:
                    - id: abc123
                      timestamp: 10
                      logmsg: example_value
                      logtypes: {}
                      event: example_value
                      tags: {}
        '401':
          description: Unauthorized
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
  /events/iterate:
    get:
      operationId: iterateEvents
      summary: Solarwinds Iterate Through Search Results
      description: Paginating event retrieval API for iterating through large result sets. Returns events and a next pointer for pagination.
      tags:
      - Search
      parameters:
      - name: rsid
        in: query
        required: true
        description: Result Set ID from the search endpoint
        schema:
          type: string
        example: '500123'
      - name: next
        in: query
        description: Pagination cursor for next page
        schema:
          type: string
        example: example_value
      responses:
        '200':
          description: Paginated event results
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IterateResponse'
              examples:
                Iterateevents200Example:
                  summary: Default iterateEvents 200 response
                  x-microcks-default: true
                  value:
                    events:
                    - id: abc123
                      timestamp: 10
                      logmsg: example_value
                      logtypes: {}
                      event: example_value
                      tags: {}
                    next: example_value
        '401':
          description: Unauthorized
      x-microcks-operation:
        delay: 0
        dispatcher: FALLBACK
components:
  schemas:
    EventsResponse:
      type: object
      properties:
        total_events:
          type: integer
          description: Total number of matching events
          example: 10
        page:
          type: integer
          description: Current page number
          example: 10
        events:
          type: array
          items:
            $ref: '#/components/schemas/LogEvent'
          example: []
    SearchResponse:
      type: object
      properties:
        rsid:
          type: object
          properties:
            id:
              type: string
              description: Result Set ID for retrieving events
            status:
              type: string
              description: Search status
          example: '500123'
    LogEvent:
      type: object
      properties:
        id:
          type: string
          description: Unique event identifier
          example: abc123
        timestamp:
          type: integer
          description: Event timestamp in milliseconds
          example: 10
        logmsg:
          type: string
          description: Raw log message
          example: example_value
        logtypes:
          type: array
          description: Detected log types
          items:
            type: string
          example: []
        event:
          type: object
          description: Parsed event fields
          additionalProperties: true
          example: example_value
        tags:
          type: array
          description: Tags associated with the event
          items:
            type: string
          example: []
    IterateResponse:
      type: object
      properties:
        events:
          type: array
          items:
            $ref: '#/components/schemas/LogEvent'
          example: []
        next:
          type: string
          description: Cursor for next page of results
          example: example_value
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: API token for authentication via Authorization Bearer header
    customerToken:
      type: apiKey
      in: path
      name: token
      description: Customer token for event submission endpoints
externalDocs:
  description: Loggly API Documentation
  url: https://documentation.solarwinds.com/en/success_center/loggly/content/admin/api-overview.htm