Datadog Logs Logs Compute Structure

{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/datadog/refs/heads/main/json-structure/datadog-logs-logs-compute-structure.json",
  "name": "LogsCompute",
  "description": "A computation to perform over the filtered log set",
  "type": "object",
  "properties": {
    "aggregation": {
      "type": "string",
      "description": "The type of aggregation to compute over log events",
      "enum": [
        "count",
        "cardinality",
        "pc75",
        "pc90",
        "pc95",
        "pc98",
        "pc99",
        "sum",
        "avg",
        "min",
        "max"
      ],
      "example": "count"
    },
    "metric": {
      "type": "string",
      "description": "The log attribute to aggregate (required for all aggregations except count)",
      "example": "example_value"
    },
    "type": {
      "type": "string",
      "description": "Whether this is a total aggregation or a timeseries",
      "enum": [
        "total",
        "timeseries"
      ],
      "example": "total"
    },
    "interval": {
      "type": "string",
      "description": "The time interval for timeseries computations (e.g., 1m, 1h, 1d)",
      "example": "example_value"
    }
  },
  "required": [
    "aggregation",
    "type"
  ]
}