Create a query from a specification. DOES NOT run the query to retrieve results.
A Honeycomb Configuration Key is required to use this API. A Configuration Key can be found in the API Keys section of the environment configuration, which can be found under Environment Settings -> API Keys -> Configuration tab. Check out our documentation to find your API Keys.
More information can be found in Manage Environments.
The dataset slug or use __all__ for endpoints that support environment-wide operations.
the columns by which to break events down into groups
100the calculations to return as a time series and summary table
100the filters with which to restrict the considered events
100set to "OR" to match ANY filter in the filter list
AND, OR The time resolution of the query's graph, in seconds. Given a query time range T, valid values (T/1000...T/1). If left blank, granularity may be set to a sub-second value for queries with short time ranges.
x >= 1The terms on which to order the query results. Each term must appear in either the breakdowns field or the calculations field.
100The maximum number of unique groups returned in 'results'. Aggregating many unique groups across a large time range is computationally expensive, and too high a limit with too many unique groups may cause queries to fail completely. Limiting the results to only the needed values can significantly speed up queries. The normal allowed maximum value when creating a query is 1_000. When running 'disable_series' queries, this can be overridden to be up to 10_000, so the maximum value returned from the API when fetching a query may be up to 10_000.
1 <= x <= 10000Absolute start time of query, in seconds since UNIX epoch. Must be <= end_time.
x >= 1Absolute end time of query, in seconds since UNIX epoch.
x >= 1Time range of query in seconds. Can be used with either start_time (seconds after start_time), end_time (seconds before end_time), or without either (seconds before now).
x >= 1The Having clause allows you to filter on the results table. This operation is distinct from the Where clause, which filters the underlying events. Order By allows you to order the results, and Having filters them.
100Computed properties that are calculated by a formula.
100When set, offsets the query's time range by this number of seconds into the past, allowing comparison with historical data from an earlier time period. For example, setting this to 86400 (24 hours) will compare current results against data from 24 hours ago.
1800 - 30 minutes3600 - 1 hour7200 - 2 hours28800 - 8 hours86400 - 24 hours604800 - 7 days2419200 - 28 days15724800 - 6 months1800, 3600, 7200, 28800, 86400, 604800, 2419200, 15724800 Success
the columns by which to break events down into groups
100the calculations to return as a time series and summary table
100the filters with which to restrict the considered events
100set to "OR" to match ANY filter in the filter list
AND, OR The time resolution of the query's graph, in seconds. Given a query time range T, valid values (T/1000...T/1). If left blank, granularity may be set to a sub-second value for queries with short time ranges.
x >= 1The terms on which to order the query results. Each term must appear in either the breakdowns field or the calculations field.
100The maximum number of unique groups returned in 'results'. Aggregating many unique groups across a large time range is computationally expensive, and too high a limit with too many unique groups may cause queries to fail completely. Limiting the results to only the needed values can significantly speed up queries. The normal allowed maximum value when creating a query is 1_000. When running 'disable_series' queries, this can be overridden to be up to 10_000, so the maximum value returned from the API when fetching a query may be up to 10_000.
1 <= x <= 10000Absolute start time of query, in seconds since UNIX epoch. Must be <= end_time.
x >= 1Absolute end time of query, in seconds since UNIX epoch.
x >= 1Time range of query in seconds. Can be used with either start_time (seconds after start_time), end_time (seconds before end_time), or without either (seconds before now).
x >= 1The Having clause allows you to filter on the results table. This operation is distinct from the Where clause, which filters the underlying events. Order By allows you to order the results, and Having filters them.
100Computed properties that are calculated by a formula.
100When set, offsets the query's time range by this number of seconds into the past, allowing comparison with historical data from an earlier time period. For example, setting this to 86400 (24 hours) will compare current results against data from 24 hours ago.
1800 - 30 minutes3600 - 1 hour7200 - 2 hours28800 - 8 hours86400 - 24 hours604800 - 7 days2419200 - 28 days15724800 - 6 months1800, 3600, 7200, 28800, 86400, 604800, 2419200, 15724800