Datadog Logs Logs Query Filter Structure

{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/datadog/refs/heads/main/json-structure/datadog-logs-logs-query-filter-structure.json",
  "name": "LogsQueryFilter",
  "description": "Filter criteria for log search queries",
  "type": "object",
  "properties": {
    "query": {
      "type": "string",
      "description": "A Datadog log search query string to filter log events (e.g., service:web status:error)",
      "example": "avg:system.cpu.user{*}"
    },
    "indexes": {
      "type": "array",
      "description": "List of log index names to search; if empty, all indexes are searched",
      "items": {
        "type": "string"
      }
    },
    "from": {
      "type": "string",
      "description": "The start of the time range for the search in ISO 8601 format or relative format (e.g., now-15m)",
      "example": "example_value"
    },
    "to": {
      "type": "string",
      "description": "The end of the time range for the search in ISO 8601 format or relative format (e.g., now)",
      "example": "example_value"
    }
  }
}