Use a URL to Run a Search

Last updated
Save as PDF
Share
1. Share
2. Tweet
3. Share

You can create a custom URL to launch a log search in Sumo Logic.

Syntax

https://<endpoint>/ui/index.html#section/search/@<start>,<end>@<urlEncodedQuery>

<endpoint> is your Sumo Logic service endpoint. See Sumo Logic Endpoints and Firewall Security for the endpoint URLs.
<start> is the start of your log query time range, the value can be either:
- in milliseconds since epoch.
- a relative time range expression.
<end> is the end of your log query time range, the value can be either:
- in milliseconds since epoch.
- a relative time range expression. You can omit the <end> value and the current time (now) is assumed.
<urlEncodedQuery> is the text of your log search query in URL encoded format.

Example

Let’s create a URL for the following log query:

test query | count by _source

Using a relative time range expression of -10w to -1w.

The custom URL that launches this log query in the Sumo Logic Search page would be similar to the following. The exact URL would depend on your Sumo Logic account endpoint, as listed in Sumo Logic Endpoints and Firewall Security.

https://service.sumologic.com/ui/#/search/@-10w,-1w@test%20query%20%7C%20count%20by%20_source

Using milliseconds as this time range:

Feb 26 2014 13:58:11 to Feb 26 2014 13:58:21 GMT-0800 (PST)

https://service.sumologic.com/ui/index.html#section/search/@1393451891051,1393451901051@test%20query%20%7C%20count%20by%20_source