aggregate detectors

curl --request POST \
  --url https://api.example.com/api/v1/detector/aggregation \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data @- <<EOF
{
  "agg": [
    {
      "func": [
        "count",
        "1"
      ]
    }
  ],
  "where": "field1='value' and field2<>'value2'",
  "groupBy": [
    "<string>"
  ],
  "sort": [
    {
      "field": "timestamp"
    }
  ],
  "from": 0,
  "size": 10
}
EOF

import requests

url = "https://api.example.com/api/v1/detector/aggregation"

payload = {
    "agg": [{ "func": ["count", "1"] }],
    "where": "field1='value' and field2<>'value2'",
    "groupBy": ["<string>"],
    "sort": [{ "field": "timestamp" }],
    "from": 0,
    "size": 10
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    agg: [{func: ['count', '1']}],
    where: 'field1=\'value\' and field2<>\'value2\'',
    groupBy: ['<string>'],
    sort: [{field: 'timestamp'}],
    from: 0,
    size: 10
  })
};

fetch('https://api.example.com/api/v1/detector/aggregation', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.example.com/api/v1/detector/aggregation",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'agg' => [
        [
                'func' => [
                                'count',
                                '1'
                ]
        ]
    ],
    'where' => 'field1=\'value\' and field2<>\'value2\'',
    'groupBy' => [
        '<string>'
    ],
    'sort' => [
        [
                'field' => 'timestamp'
        ]
    ],
    'from' => 0,
    'size' => 10
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.example.com/api/v1/detector/aggregation"

	payload := strings.NewReader("{\n  \"agg\": [\n    {\n      \"func\": [\n        \"count\",\n        \"1\"\n      ]\n    }\n  ],\n  \"where\": \"field1='value' and field2<>'value2'\",\n  \"groupBy\": [\n    \"<string>\"\n  ],\n  \"sort\": [\n    {\n      \"field\": \"timestamp\"\n    }\n  ],\n  \"from\": 0,\n  \"size\": 10\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.example.com/api/v1/detector/aggregation")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"agg\": [\n    {\n      \"func\": [\n        \"count\",\n        \"1\"\n      ]\n    }\n  ],\n  \"where\": \"field1='value' and field2<>'value2'\",\n  \"groupBy\": [\n    \"<string>\"\n  ],\n  \"sort\": [\n    {\n      \"field\": \"timestamp\"\n    }\n  ],\n  \"from\": 0,\n  \"size\": 10\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.example.com/api/v1/detector/aggregation")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"agg\": [\n    {\n      \"func\": [\n        \"count\",\n        \"1\"\n      ]\n    }\n  ],\n  \"where\": \"field1='value' and field2<>'value2'\",\n  \"groupBy\": [\n    \"<string>\"\n  ],\n  \"sort\": [\n    {\n      \"field\": \"timestamp\"\n    }\n  ],\n  \"from\": 0,\n  \"size\": 10\n}"

response = http.request(request)
puts response.read_body

[
  "<unknown>"
]

POST

api

detector

aggregation

aggregate detectors

curl --request POST \
  --url https://api.example.com/api/v1/detector/aggregation \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data @- <<EOF
{
  "agg": [
    {
      "func": [
        "count",
        "1"
      ]
    }
  ],
  "where": "field1='value' and field2<>'value2'",
  "groupBy": [
    "<string>"
  ],
  "sort": [
    {
      "field": "timestamp"
    }
  ],
  "from": 0,
  "size": 10
}
EOF

import requests

url = "https://api.example.com/api/v1/detector/aggregation"

payload = {
    "agg": [{ "func": ["count", "1"] }],
    "where": "field1='value' and field2<>'value2'",
    "groupBy": ["<string>"],
    "sort": [{ "field": "timestamp" }],
    "from": 0,
    "size": 10
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    agg: [{func: ['count', '1']}],
    where: 'field1=\'value\' and field2<>\'value2\'',
    groupBy: ['<string>'],
    sort: [{field: 'timestamp'}],
    from: 0,
    size: 10
  })
};

fetch('https://api.example.com/api/v1/detector/aggregation', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.example.com/api/v1/detector/aggregation",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'agg' => [
        [
                'func' => [
                                'count',
                                '1'
                ]
        ]
    ],
    'where' => 'field1=\'value\' and field2<>\'value2\'',
    'groupBy' => [
        '<string>'
    ],
    'sort' => [
        [
                'field' => 'timestamp'
        ]
    ],
    'from' => 0,
    'size' => 10
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.example.com/api/v1/detector/aggregation"

	payload := strings.NewReader("{\n  \"agg\": [\n    {\n      \"func\": [\n        \"count\",\n        \"1\"\n      ]\n    }\n  ],\n  \"where\": \"field1='value' and field2<>'value2'\",\n  \"groupBy\": [\n    \"<string>\"\n  ],\n  \"sort\": [\n    {\n      \"field\": \"timestamp\"\n    }\n  ],\n  \"from\": 0,\n  \"size\": 10\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.example.com/api/v1/detector/aggregation")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"agg\": [\n    {\n      \"func\": [\n        \"count\",\n        \"1\"\n      ]\n    }\n  ],\n  \"where\": \"field1='value' and field2<>'value2'\",\n  \"groupBy\": [\n    \"<string>\"\n  ],\n  \"sort\": [\n    {\n      \"field\": \"timestamp\"\n    }\n  ],\n  \"from\": 0,\n  \"size\": 10\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.example.com/api/v1/detector/aggregation")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"agg\": [\n    {\n      \"func\": [\n        \"count\",\n        \"1\"\n      ]\n    }\n  ],\n  \"where\": \"field1='value' and field2<>'value2'\",\n  \"groupBy\": [\n    \"<string>\"\n  ],\n  \"sort\": [\n    {\n      \"field\": \"timestamp\"\n    }\n  ],\n  \"from\": 0,\n  \"size\": 10\n}"

response = http.request(request)
puts response.read_body

[
  "<unknown>"
]

Authorizations

Authorization

string

header

required

Authentication

Body

application/json

agg

object[]

required

Aggregation functions with fields to aggregate. Represent SQL 'select' in 'group by' query. !!!IMPORTANT!!! Use with caution, because usage with JOIN can require aggregate with 'distinct'

Minimum array length: 1

Show child attributes

Example:

[{ "func": ["count", "1"] }]

where

string

Query string to search for data. Represent SQL 'where'

Example:

"field1='value' and field2<>'value2'"

groupBy

string[]

Group by parameter for aggregation query

sort

object[]

Sorting for the search

Show child attributes

from

integer<int32>

Starting document offset

Required range: x >= 0

Example:

0

size

integer<int32>

The number of hits to return

Required range: 0 <= x <= 10000

Example:

10

Response

200 - application/json

Overview

Action Route

Admin Route

Api Key Route

Contract Audit Route

Contract Route

Tenant Destination Route

Detector Route

License Instance Route

License Instance Meta Route

Invite Route

License Route

License Score Group Route

Network Route

Organisation Route

Plan Route

Project Route

Project Documentation Route

Registration Route

Detector Schema Route

Score Route

Score Group Route

Subscription Route

Syslog Route

Tenant Route

Tokenomics Category Route

Tokenomics Schedule Route

Trigger Route

User Route

Wallet Route

Telegram Route

Auth Route

Swagger Specs Route

aggregate detectors

Authorizations

Body

Response