Using the Foundry Logscale service collection

Table of Contents

ListReposV1

Lists available repositories and views

PEP8 method name

list_repos

Endpoint

Method	Route
	/loggingapi/combined/repos/v1

Content-Type

• Consumes: application/json
• Produces: application/json

Keyword Arguments

No parameters

Usage

Service class example (PEP8 syntax)

from falconpy import FoundryLogScale

falcon = FoundryLogScale(client_id=CLIENT_ID,
                         client_secret=CLIENT_SECRET
                         )

response = falcon.list_repos()
print(response)

Service class example (Operation ID syntax)

from falconpy import FoundryLogScale

falcon = FoundryLogScale(client_id=CLIENT_ID,
                         client_secret=CLIENT_SECRET
                         )

response = falcon.ListReposV1()
print(response)

Uber class example

from falconpy import APIHarnessV2

falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

response = falcon.command("ListReposV1")
print(response)

IngestDataV1

Ingest data into the application repository

PEP8 method name

ingest_data

Endpoint

Method	Route
	/loggingapi/entities/data-ingestion/ingest/v1

Content-Type

• Consumes: multipart/form-data
• Produces: application/json

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
data_file			formData	file	Data file to ingest.
parameters			query	dictionary	Full query string parameters payload in JSON format.
tag			formData	string or list of strings	Custom tag for ingested data in the form tag:value.
tag_source			formData	string	Tag the data with the specified source.
test_data			formData	boolean	Tag the data with test-ingest.

Usage

Service class example (PEP8 syntax)

from falconpy import FoundryLogScale

falcon = FoundryLogScale(client_id=CLIENT_ID,
                         client_secret=CLIENT_SECRET
                         )

with open("file_name.ext", "rb") as upload_file:
    response = falcon.ingest_data(tag="string",
                                  tag_source="string",
                                  test_data=boolean,
                                  data_file=upload_file.read()
                                  )
print(response)

Service class example (Operation ID syntax)

from falconpy import FoundryLogScale

falcon = FoundryLogScale(client_id=CLIENT_ID,
                         client_secret=CLIENT_SECRET
                         )

with open("file_name.ext", "rb") as upload_file:
    response = falcon.IngestDataV1(tag="string",
                                   tag_source="string",
                                   test_data=boolean,
                                   data_file=upload_file.read()
                                   )
print(response)

Uber class example

from falconpy import APIHarnessV2

falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

with open("file_name.ext", "rb") as upload_file:
    response = falcon.command("IngestDataV1",
                              tag="string",
                              tag_source="string",
                              test_data=boolean,
                              data_file=upload_file.read()
                              )
print(response)

CreateSavedSearchesDynamicExecuteV1

Execute a dynamic saved search

PEP8 method name

execute_dynamic

Endpoint

Method	Route
	/loggingapi/entities/saved-searches/execute-dynamic/v1

Content-Type

• Consumes: application/json
• Produces: application/json

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
app_id			query	string	Include generated schemas in the response
end			body	boolean	Dynamic search end
include_schema_generation			query	boolean	Include generated schemas in the response
include_test_data			query	boolean	Include test data when executing searches
metadata			query	boolean	Whether to include metadata in the response
mode			query	string	Mode to execute the query under.
body			body	string	Full body payload in JSON format, not required if using other keywords.
parameters			query	dictionary	Full query string parameters payload in JSON format.
repo_or_view			body	string	Repository or view to search
search_query			body	string	Search query to perform
search_query_args			body	dictionary	Search query arguments to leverage when processing the query
start			body	string	Dynamic search start

Usage

Service class example (PEP8 syntax)

from falconpy import FoundryLogScale

falcon = FoundryLogScale(client_id=CLIENT_ID,
                         client_secret=CLIENT_SECRET
                         )

response = falcon.execute_dynamic(app_id="string",
                                  end="string",
                                  include_schema_generation=boolean,
                                  include_test_data=boolean,
                                  metadata=boolean,
                                  mode="string",
                                  repo_or_view="string",
                                  search_query="string",
                                  seach_query_args = {},
                                  start="string"
                                  )
print(response)

Service class example (Operation ID syntax)

from falconpy import FoundryLogScale

falcon = FoundryLogScale(client_id=CLIENT_ID,
                         client_secret=CLIENT_SECRET
                         )

response = falcon.CreateSavedSearchesDynamicExecuteV1(app_id="string",
                                                      end="string",
                                                      include_schema_generation=boolean,
                                                      include_test_data=boolean,
                                                      metadata=boolean,
                                                      mode="string",
                                                      repo_or_view="string",
                                                      search_query="string",
                                                      seach_query_args = {},
                                                      start="string")
print(response)

Uber class example

from falconpy import APIHarnessV2

falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

body_payload = {
    "end": "string",
    "repo_or_view": "string",
    "search_query": "string",
    "search_query_args": {},
    "start": "string"
}

response = falcon.command("CreateSavedSearchesDynamicExecuteV1",
                          app_id="string",
                          include_schema_generation=boolean,
                          include_test_data=boolean,
                          metadata=boolean,
                          mode="string",
                          body=body_payload
                          )
print(response)

GetSavedSearchesExecuteV1

Get the results of a saved search

PEP8 method name

get_search_results

Endpoint

Method	Route
	/loggingapi/entities/saved-searches/execute/v1

Content-Type

• Consumes: application/json
• Produces: application/json

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
job_id			query	string	Job ID for a previously executed async query
limit			query	string	Maximum number of records to return.
metadata			query	boolean	Whether to include metadata in the response
offset			query	string	Starting pagination offset of records to return.
parameters			query	dictionary	Full query string parameters payload in JSON format.
version			query	string	Version of resource being created

Usage

Service class example (PEP8 syntax)

from falconpy import FoundryLogScale

falcon = FoundryLogScale(client_id=CLIENT_ID,
                         client_secret=CLIENT_SECRET
                         )

response = falcon.get_search_results(job_id="string",
                                     limit="string",
                                     metadata=boolean,
                                     offset="string",
                                     version="string"
                                     )
print(response)

Service class example (Operation ID syntax)

from falconpy import FoundryLogScale

falcon = FoundryLogScale(client_id=CLIENT_ID,
                         client_secret=CLIENT_SECRET
                         )

response = falcon.GetSavedSearchesExecuteV1(job_id="string",
                                            limit="string",
                                            metadata=boolean,
                                            offset="string",
                                            version="string"
                                            )
print(response)

Uber class example

from falconpy import APIHarnessV2

falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

response = falcon.command("GetSavedSearchesExecuteV1",
                          job_id="string",
                          limit="string",
                          metadata=boolean,
                          offset="string",
                          version="string"
                          )
print(response)

CreateSavedSearchesExecuteV1

Execute a saved search

PEP8 method name

execute

Endpoint

Method	Route
	/loggingapi/entities/saved-searches/execute/v1

Content-Type

• Consumes: application/json
• Produces: application/json

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
body			body	string	Full body payload in JSON format. Not required if using other keywords.
detailed			query	boolean	Whether to include search field details
end			body	string	Saved search end.
id			body	string	Saved search ID.
include_test_data			query	boolean	Include test data when executing searches
metadata			query	boolean	Whether to include metadata in the response
mode			body	string	Mode to execute the query under. If provided, takes precedence over the mode provided in the body.
name			body	string	Name of the saved search.
parameters			query	string	Full query string payload in JSON format. Not required if using other keywords.
search_parameters			body	dictionary	Parameters to use for the saved search.
start			body	string	Saved search start.
version			body	string	Version of resource being created
with_in			body	dictionary	Limit search results to field names matching the provided list.
with_limit			body	dictionary	Limit search results by a maximum count.
with_renames			body	list	Rename fields for display.
with_sort			body	dictionary	Apply sort criteria.

Usage

Service class example (PEP8 syntax)

from falconpy import FoundryLogScale

falcon = FoundryLogScale(client_id=CLIENT_ID,
                         client_secret=CLIENT_SECRET
                         )

with_in_dictionary = {
    "field": "string",
    "values": [
       "string"
    ]
}
with_limit_dictionary = {
    "from": "string",
    "limit": 0
}
with_renames_list =  [
    {
        "as": "string",
        "field": "string"
    }
]
with_sort_dictionary = {
    "fields": [
        "string"
    ],
    "limit": 0,
    "order": [
        "string"
    ],
    "reverse": boolean,
    "type": [
       "string"
    ]
}

response = falcon.execute(detailed=boolean,
                          end="string",
                          id="string",
                          include_test_data=boolean,
                          metadata=boolean,
                          mode="string",
                          name="string",
                          search_parameters={},
                          start="string",
                          version="string",
                          with_in = with_in_dictionary,
                          with_limit = with_limit_dictionary,
                          with_renames = with_renames_list,
                          with_sort = with_sort_dictionary
                          )
print(response)

Service class example (Operation ID syntax)

from falconpy import FoundryLogScale

falcon = FoundryLogScale(client_id=CLIENT_ID,
                         client_secret=CLIENT_SECRET
                         )

with_in_dictionary = {
    "field": "string",
    "values": [
       "string"
    ]
}
with_limit_dictionary = {
    "from": "string",
    "limit": 0
}
with_renames_list =  [
    {
        "as": "string",
        "field": "string"
    }
]
with_sort_dictionary = {
    "fields": [
        "string"
    ],
    "limit": 0,
    "order": [
        "string"
    ],
    "reverse": boolean,
    "type": [
       "string"
    ]
}

response = falcon.CreateSavedSearchesExecuteV1(detailed=boolean,
                                               end="string",
                                               id="string",
                                               include_test_data=boolean,
                                               metadata=boolean,
                                               mode="string",
                                               name="string",
                                               search_parameters={},
                                               start="string",
                                               version="string",
                                               with_in = with_in_dictionary,
                                               with_limit = with_limit_dictionary,
                                               with_renames = with_renames_list,
                                               with_sort = with_sort_dictionary
                                               )
print(response)

Uber class example

from falconpy import APIHarnessV2

falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

with_in_dictionary = {
    "field": "string",
    "values": [
       "string"
    ]
}
with_limit_dictionary = {
    "from": "string",
    "limit": 0
}
with_renames_list =  [
    {
        "as": "string",
        "field": "string"
    }
]
with_sort_dictionary = {
    "fields": [
        "string"
    ],
    "limit": 0,
    "order": [
        "string"
    ],
    "reverse": boolean,
    "type": [
       "string"
    ]
}

body_payload = {
    "end": "string",
    "id": "string",
    "mode": "string",
    "name": "string",
    "parameters": {},
    "start": "string",
    "version": "string",
    "with_in": with_in_dictionary,
    "with_limit": with_limit_dictionary,
    "with_renames": with_renames_list,
    "with_sort": with_sort_dictionary
}

response = falcon.command("CreateSavedSearchesExecuteV1",
                          detailed=boolean,
                          include_test_data=boolean,
                          metadata=boolean,
                          body=body_payload
                          )
print(response)

CreateSavedSearchesIngestV1

Populate a saved search

PEP8 method name

populate

Endpoint

Method	Route
	/loggingapi/entities/saved-searches/ingest/v1

Content-Type

• Consumes: multipart/form-data
• Produces: application/json

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
app_id			query	string	Include generated schemas in the response
parameters			query	dictionary	Full query string parameters payload in JSON format.

Usage

Service class example (PEP8 syntax)

from falconpy import FoundryLogScale

falcon = FoundryLogScale(client_id=CLIENT_ID,
                         client_secret=CLIENT_SECRET
                         )

response = falcon.populate(app_id="string")
print(response)

Service class example (Operation ID syntax)

from falconpy import FoundryLogScale

falcon = FoundryLogScale(client_id=CLIENT_ID,
                         client_secret=CLIENT_SECRET
                         )

response = falcon.CreateSavedSearchesIngestV1(app_id="string")
print(response)

Uber class example

from falconpy import APIHarnessV2

falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

response = falcon.command("CreateSavedSearchesIngestV1", app_id="string")
print(response)

GetSavedSearchesJobResultsDownloadV1

Get the results of a saved search as a file

PEP8 method name

download_results

Endpoint

Method	Route
	/loggingapi/entities/saved-searches/job-results-download/v1

Content-Type

• Consumes: application/json
• Produces: application/octet-stream

Keyword Arguments

Name	Service	Uber	Type	Data type	Description
job_id			query	string	Job ID for a previously executed async query
parameters			query	dictionary	Full query string parameters payload in JSON format.
result_format			query	string	Result Format

Usage

Service class example (PEP8 syntax)

from falconpy import FoundryLogScale

falcon = FoundryLogScale(client_id=CLIENT_ID,
                         client_secret=CLIENT_SECRET
                         )

with open("some_file.ext", "wb", encoding="utf-8") as save_file:
    save_file.write(falcon.download_results(job_id="string", result_format="string"))

Service class example (Operation ID syntax)

from falconpy import FoundryLogScale

falcon = FoundryLogScale(client_id=CLIENT_ID,
                         client_secret=CLIENT_SECRET
                         )

with open("some_file.ext", "wb", encoding="utf-8") as save_file:
    save_file.write(falcon.GetSavedSearchesJobResultsDownloadV1(job_id="string",
                                                                result_format="string")
                                                                )

Uber class example

from falconpy import APIHarnessV2

falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

with open("some_file.ext", "wb", encoding="utf-8") as save_file:
    save_file.write(falcon.command("GetSavedSearchesJobResultsDownloadV1",
                                   job_id="string",
                                   result_format="string"
                                   ))

ListViewV1

List views

PEP8 method name

list_views

Endpoint

Method	Route
	/loggingapi/entities/views/v1

Content-Type

• Consumes: application/json
• Produces: application/json

Keyword Arguments

No parameters

Usage

Service class example (PEP8 syntax)

from falconpy import FoundryLogScale

falcon = FoundryLogScale(client_id=CLIENT_ID,
                         client_secret=CLIENT_SECRET
                         )

response = falcon.list_views()
print(response)

Service class example (Operation ID syntax)

from falconpy import FoundryLogScale

falcon = FoundryLogScale(client_id=CLIENT_ID,
                         client_secret=CLIENT_SECRET
                         )

response = falcon.ListViewV1()
print(response)

Uber class example

from falconpy import APIHarnessV2

falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

response = falcon.command("ListViewV1")
print(response)