Skip to main content

Simple Example

Simple example for v2/logs/scroll API - Single request without pagination.

Use this when you want to retrieve a small number of logs without handling pagination.


Code Example

import requests
import logging
from datetime import datetime, timedelta

# Configure logging
logging.basicConfig(
level=logging.INFO,
format='%(asctime)s - %(levelname)s - %(message)s'
)
logger = logging.getLogger(__name__)

# Configuration
BASE_URL = "https://central-monitoring-data-api.mywizard-aiops.com"
TOKEN_URL = "https://your-auth-endpoint.com/oauth2/token"
CLIENT_ID = "your-client-id"
CLIENT_SECRET = "your-client-secret"

# Step 1: Get access token
logger.info("Getting access token...")
token_response = requests.post(
TOKEN_URL,
data={
"grant_type": "client_credentials",
"client_id": CLIENT_ID,
"client_secret": CLIENT_SECRET
},
headers={"Content-Type": "application/x-www-form-urlencoded"}
)
access_token = token_response.json()["access_token"]
logger.info("Access token retrieved")

# Step 2: Prepare request
end_time = datetime.utcnow()
start_time = end_time - timedelta(hours=1)

payload = {
"application": "atr",
"app_type": "kubernetes",
"domain": ["*"],
"start_time": start_time.strftime("%Y-%m-%dT%H:%M:%SZ"),
"end_time": end_time.strftime("%Y-%m-%dT%H:%M:%SZ"),
"size": 50
}

headers = {
"Authorization": f"Bearer {access_token}",
"Content-Type": "application/json",
"client_id": CLIENT_ID
}

logger.info("Payload and headers constructed")

# Step 3: Make request
logger.info("Fetching logs")
response = requests.post(
f"{BASE_URL}/v2/logs/scroll",
json=payload,
headers=headers
)

# Step 4: Process response
if response.status_code == 200:
data = response.json()
logs = data.get("data", {}).get("logs", [])
log_count = data.get("meta", {}).get("log_count", 0)
scroll_id = data.get("meta", {}).get("scroll_id")

logger.info(f"Retrieved {len(logs)} logs (total available: {log_count})")

if scroll_id:
logger.info(f"More logs available. Use scroll_id to fetch next page:")
logger.info(f"scroll_id: {scroll_id[:50]}...")

# Display first log
if logs:
logger.info("First log:")
logger.info(f"Timestamp: {logs[0].get('_source', {}).get('@timestamp')}")
logger.info(f"Message: {logs[0].get('_source', {}).get('message', '')[:100]}")
else:
logger.error(f"Request failed: {response.status_code}")
logger.error(f"{response.text}")