GitHubGitHub (opens in a new tab)Get a DemoStart Free TrialSign In
  • Logit.io Documentation
  • Getting Started
    • Account and Stack
    • Filebeat
    • Filebeat Modules
    • Windows
    • Linux
    • Kubernetes
    • AWS (Amazon Web Services)
    • Microsoft Azure
    • Jaeger
    • Monitoring an Application
    • Opentelemetry
    • Telegraf
    • OpenSearch Dashboards
    • Grafana Dashboards
  • Log Management
    • Overview
    • Getting Started
    • Alerting
      • Overview
      • Create a rule
      • Subject & body
      • Context & links
      • Rule types
        • Any
        • Blacklist
        • Whitelist
        • Change
        • Frequency
        • Spike
        • Flatline
        • New term
        • Cardinality
        • Metric aggregation
        • Spike aggregation
        • Percentage match
      • Destinations
        • Alerta
        • Alertmanager
        • Amazon SES
        • Amazon SNS
        • Amazon SQS
        • Chatwork
        • Datadog
        • Debug
        • DFIR-IRIS
        • DingTalk
        • Discord
        • Email
        • Exotel
        • Flashduty
        • Gitter
        • Google Chat
        • Grafana IRM (OnCall)
        • Graylog GELF
        • Indexer
        • Jira
        • Lark
        • LINE
        • Matrix Hookshot
        • Mattermost
        • Microsoft Power Automate
        • Microsoft Teams
        • Opsgenie
        • PagerDuty
        • PagerTree
        • Rocket.Chat
        • ServiceNow
        • Slack
        • SMSEagle
        • Splunk On-Call (VictorOps)
        • STOMP
        • Telegram
        • Tencent SMS
        • TheHive
        • Twilio
        • Webex webhooks
        • Webhook (HTTP POST)
        • Webhook (HTTP POST 2, Jinja)
        • WeCom (Work WeChat)
        • YZJ
        • Zabbix
      • Full Reference
      • OpenSearch Alerting
        • Log volume (YAML)
        • High CPU (OpenSearch)
        • Scenarios
        • Validation
        • HTML in email
      • Notifications
    • F.A.Qs
      • How to add the OpenSearch Java client
      • Sending Azure Logs and Metrics to Logit.io
      • What are the risks of sending data via UDP
    • Grafana
      • Access Grafana features via REST API
      • Viewing Logs in Grafana
    • Ingestion Pipeline
      • Overview
      • Configuration
        • Configuring Logstash Filters
        • Configuring Logstash Firewall
        • Configuring Logstash Inputs
      • Adding Inputs
        • Add a HTTP SSL Input
        • Add Amazon S3 Input
        • Add Azure Event Hub Input
        • Add Beats Input
        • Add GELF Input
        • Add Google Cloud Storage Input
        • Add Google Pub/Sub Input
        • Add SQS Input
        • Add Syslog SSL Input
        • Add Syslog TCP or UDP Input
        • Add TCP Input
        • Add TCP SSL Input
        • Add UDP Input
      • API Key for Logstash
      • Differentiating Log Types
      • Logstash Filters Reference
      • Logstash Filters
        • Age
        • Aggregate
        • Alter
        • Bytes
        • CIDR
        • Cipher
        • Clone
        • CSV
        • Date
        • de_dot
        • Dissect
        • Drop
        • Elapsed
        • Environment
        • Extract Numbers
        • Fingerprint
        • GeoIP
        • Grok
        • i18n
        • Java UUID
        • JSON
        • JSON Encode
        • KV
        • Math
        • Metricize
        • Metrics
        • Mutate
        • Prune
        • Range
        • Ruby
        • Sleep
        • Split
        • Syslog PRI
        • Threats Classifier
        • Throttle
        • TLD
        • Translate
        • Truncate
        • URL Decode
        • UserAgent
        • UUID
        • WURFL Device Detection
        • XML
      • Removing Fields with Filters
      • Changing Index Names
      • Dead Letter Queue (DLQ)
    • Kibana
      • Access Kibana features via REST API
      • Creating Visualizations
      • Enabling Kibana Multi-Stack
      • Logit.io Kibana Cheatsheet
    • OpenSearch
      • OpenSearch REST API
      • Searching
        • Disabling Field Searches
        • Export Search Results
        • Pagination
        • Querying With Mapper Size
        • Querying with Python
        • Querying With SQL Workbench
      • Index Management
        • Aggregatable Text Fields
        • Changing Field Datatypes
        • Index Mappings
          • Overview
          • How to View Mappings
          • Mapping Conflicts
          • Mapping IP Address Info to geo_point Fields
        • Index Patterns
        • Index Templates
        • List Indexes
        • Reindexing
      • OpenSearch Dashboards
        • Overview
        • Access Opensearch Dashboard features via REST API
        • Exporting and Importing
      • Reporting
      • Cold Storage Restoration
      • Supported Versions
      • Timezones
    • Security
      • Authorizing Applications
      • Multi-Tenancy
      • OpenSearch API Access
      • SSL Certification Expiry Notice
      • SSL Configuration
      • Whitelisted Hosts
    • Troubleshooting
      • Diagnose Issues with Filebeat Configuration
      • How Can I Monitor My Stack Health
      • How Do I Delete Old Indexes in Logit.io
      • How to create an Amazon S3 Bucket
      • Log Volume Count
      • No Data in Elasticsearch, OpenSearch, or Grafana
      • Temporarily Reduce Logs Stack Retention
      • What is Logit.io's Policy on Upgrading ELK
  • Infrastructure Metrics
    • Overview
    • Getting Started
    • Connect to Grafana
      • Overview
      • Authentication
      • Terraform
      • Python
      • cURL
      • Dashboards as Code
    • Sending Data
      • Overview
      • Remote Write
      • Scrape Config
    • Visualizers
      • Access Grafana features via REST API
      • View Infrastructure Metrics with Grafana
    • Alerting
      • Overview
      • Configuring CPU Alerts
      • Configuring Disk Usage Alerts
      • Configuring RAM Usage Alerts
    • Storage
    • Statistics
    • Metrics Volume Count
    • Audit Log
  • Application Performance Monitoring
    • Overview
    • Getting Started
    • Audit Log
    • Configure Authorized Applications
    • Ingestion Pipeline
      • Overview
      • Calculating Span Ingestion
      • OpenTelemetry Inputs
    • Jaeger
      • Access Jaeger features via REST API
      • Span Types
      • Viewing Spans & Traces
    • Statistics
    • Storage
    • Troubleshooting
      • Infrastructure to Logit.io Connectivity
    • Visualizers
  • Hosted OpenSearch
    • Overview
    • How to Create
    • How to Connect
    • Cluster Settings
    • Examples
      • C# Example
      • cURL Example
      • Python Example
      • Java Example
    • OpenSearch REST API
    • Using OpenTelemetry for Logs
    • Using OpenTelemetry for Metrics
    • Using OpenTelemetry for Traces
  • Integrations
    • .NET (Core / 5+)
    • 1Password
    • Active Directory
    • ActiveMQ
    • Aerospike
    • Apache Cassandra
    • Apache HTTP Server
    • Apache Mesos
    • Apache Solr
    • Apache Storm
    • Apache Tomcat
    • AppHarbor
    • Argo CD
    • Auditbeat
    • Auditd
    • Avast
    • AWS Beanstalk
    • AWS CloudFront
    • AWS CloudTrail
    • AWS CloudWatch
    • AWS EC2
    • AWS ECS Fargate Metrics
    • AWS EKS Metrics
    • AWS Elastic Kubernetes Service
    • AWS Elastic Kubernetes Service Logs
    • AWS ELB Application
    • AWS ELB Classic
    • AWS Lambda Cloudwatch
    • AWS RDS
    • AWS S3
    • AWS S3 bucket with an SQS queue
    • AWS VPC Flow Logs
    • Axonius
    • Azure Activity Logs
    • Azure AKS
    • Azure Container Activity Logs
    • Azure Eventhub Diagnostic Logs
    • Azure Kubernetes
    • Azure Logs
    • Azure Metrics
    • Azure SQL
    • bCache
    • Beanstalkd
    • Bond
    • bunny.net CDN
    • Burrow
    • C++
    • CentOS
    • Ceph
    • CheckPoint
    • Cisco ASA Router
    • Cisco Firepower
    • Cisco Meraki
    • ClickHouse
    • Cloud Foundry
    • CouchDB
    • Cynet
    • Debian
    • DigitalOcean
    • Disque
    • Django
    • Docker
    • Dovecot
    • Elastic Agent
    • Elasticsearch
    • Elixir
    • Erlang
    • ESET
    • etcd
    • Fail2ban
    • Falco
    • Fastly
    • File Upload
    • Filebeat
    • Filebeat System
    • Fluent Bit
    • Fluentd
    • Fortigate
    • GELF
    • Github
    • GitLab
    • Go
    • Golang
    • Google AI Platform Metrics
    • Google API Gateway Metrics
    • Google Apigee Metrics
    • Google App Engine Metrics
    • Google Assistant Smart Home Metrics
    • Google BigQuery BI Engine Metrics
    • Google BigQuery Data Transfer Metrics
    • Google BigQuery Metrics
    • Google Certificate Authority Metrics
    • Google Cloud API Metrics
    • Google Cloud Armor Metrics
    • Google Cloud BigTable Metrics
    • Google Cloud Composer Metrics
    • Google Cloud Data Loss Prevention Metrics
    • Google Cloud DNS Metrics
    • Google Cloud Functions Metrics
    • Google Cloud GKE Metrics
    • Google Cloud Healthcare Metrics
    • Google Cloud IDS Metrics
    • Google Cloud Interconnect Metrics
    • Google Cloud Load Balancing
    • Google Cloud Logging Metrics
    • Google Cloud Monitoring Metrics
    • Google Cloud Operations
    • Google Cloud PostgreSQL Metrics
    • Google Cloud Router Metrics
    • Google Cloud Run
    • Google Cloud SQL Metrics
    • Google Cloud Storage Audit
    • Google Cloud Storage Metrics
    • Google Cloud Tasks Metrics
    • Google Cloud TPU Metrics
    • Google Cloud Trace Metrics
    • Google Cloud VPN Metrics
    • Google Cloud Workspace Configuration
    • Google Compute Engine
    • Google Compute Engine Autoscaler Metrics
    • Google Contact Center AI Insights Metrics
    • Google Dataflow Metrics
    • Google Dataproc Metastore Metrics
    • Google Dataproc Metrics
    • Google Datastore Metrics
    • Google Datastream Metrics
    • Google Filestore Metrics
    • Google Firebase Metrics
    • Google Firestore Metrics
    • Google Firewall Insights Metrics
    • Google Identity Access Metrics
    • Google IOT Core Metrics
    • Google Kubernetes Engine Logs
    • Google Kubernetes Engine Metrics
    • Google Kubernetes Engine Metrics
    • Google Managed Service Active Directory Metrics
    • Google Memory Store Memcached Metrics
    • Google Memory Store Redis Metrics
    • Google Network Topology Metrics
    • Google Pub Sub Metrics
    • Google Recaptcha Enterprise Metrics
    • Google Recommendations Metrics
    • Google Storage Transfer Metrics
    • Google Vertex AI Metrics
    • Google VM Manager Metrics
    • Google VPC Metrics
    • Google Workflows Metrics
    • HAProxy
    • Hashicorp Vault
    • Heartbeat
    • Heroku
    • IIS
    • IPMI
    • Java
    • Jenkins
    • Journalbeat
    • JSON via HTTP/S
    • JTI OpenConfig
    • Juniper SRX
    • Kafka
    • Kafka MQ
    • KeyCDN
    • Kibana
    • Kong
    • Kubernetes
    • Local Logstash
    • log4net
    • Logstash Logging
    • macOS
    • Mailchimp
    • McAfee EPO
    • Mcrouter
    • Memcached
    • Metricbeat
    • Microsoft 365
    • MongoDB
    • MSMQ
    • Mulesoft
    • MySQL
    • Neptune Apex
    • Network Device
    • Nginx
    • NLog
    • Node.js
    • NSQ
    • NSQ Consumer
    • Nvidia SMI
    • OpenSearch
    • OpenTelemetry Collector
    • OpenVAS
    • OpenVPN
    • Oracle Kubernetes Engine
    • Ossec
    • Packetbeat
    • Palo Alto Networks
    • pfSense
    • PgBouncer
    • PHP
    • PHP-FPM
    • Phusion Passenger
    • PostgreSQL
    • Prometheus
    • Python
    • RabbitMQ
    • Rancher
    • RavenDB
    • Red Hat
    • Redfish
    • Redis
    • Riak
    • RSyslog
    • Ruby
    • Ruby on Rails
    • Rust
    • SentinelOne
    • Serilog
    • Solaris
    • Sonic Wall
    • SQL Server
    • Stormshield
    • Suricata
    • Swift
    • Synproxy
    • Syslog-NG
    • Sysmon
    • System Metrics
    • TCP
    • TeamCity Server
    • Telegraf
    • Tengine
    • Traefik
    • Trend Micro
    • Ubuntu
    • UDP
    • Unbound
    • Victoria Metrics vmagent
    • Vmware Vsphere
    • Wazuh
    • Windows
    • Winlogbeat
    • Wireguard
    • YouTube
    • Zeek
    • ZFS
    • Zookeeper
    • Overview
    • Authentication
    • Getting Started
    • Generating Clients
    • Profile and API Keys via API
    • Account Management via API
    • Managing Stacks via API
    • Ingestion Statistics via API
    • Alerting via API
    • Pipeline Configuration via API
    • Security and Diagnostics via API
    • API Reference
  • Account Administration
    • Account Access, Users & Teams
      • Roles & Access
        • Change Logit.io User or Authentication Type
        • Give a User/Team Access Only To an OpenSearch Index
        • How do I view my Account Administrators?
        • Learn how to invite and add users to teams
        • Manage Teams and User Permissions
        • Managing OpenSearch & Grafana Security Roles
        • OpenSearch Custom Role For Granular Access
        • OpenSearch Read Only or Dashboard Only Access
        • Transfer Account Ownership To Someone Else
      • Single Sign On
        • Configure OKTA SSO
        • Enable SSO for Logit.io
        • Sign In via Single Sign On
      • Troubleshooting
        • Access Denied Errors Azure AD Login
        • Contact Support
        • Grant Stack Access for Support
        • How to reset your Logit.io password
      • Two Factor Authentication
        • Disable Two-Factor Authentication for Logit.io
        • Enable Two-Factor Authentication for Logit.io
        • Enforce Two-Factor Authentication for an Account
        • Google Authenticator for Two-Factor Authentication
    • Subscriptions, Management & Usage
      • Accounts
        • Data Storage Regions
        • Exceeding Log Volume Limits
        • How To Close My Account
        • How To Delete a Stack
        • Plan Resizing Options
        • Transfer Stacks to Another Account
        • What Happens When My Trial Ends
      • Billing
        • Can I change the email for overusage emails?
        • How do I change my billing details?
        • How do I make a payment to restore access?
        • How do I view my invoices?
        • How to Change the Email for Invoicing
        • How to resize your stack when required
        • Pay For a Different Plan For Each Stack
      • Product
        • Archive Data After Retention Timeframe Has Ended
        • Does Updating a Stack Lose Any Data?
        • How can I be sure my data is secure?
        • How Logit.io Calculates Index Sizes and Usage Statistics
        • How to add plugins
        • Learn how to reduce your log volumes
        • Migrate/Upgrade Stack Latest Version
        • Send Data From an Uncommon Service, Network, or App
        • Upgrade to the Latest Version of Elastalert
        • View Logit.io ELK Stack Usage & Daily Log Volume
        • What Happens to Data After the Retention Period Passed?
        • Where can I check the Logit.io system status?
        • Which Region Stores Logs, Metrics, and Tracing Data?
    • Field Sets
    • Base
    • Agent
    • Client
    • Cloud
    • Container
    • Data Stream
    • Destination
    • Device
    • DLL
    • DNS
    • ECS
    • Email
    • Error
    • Event
    • FaaS
    • File
    • Group
    • Host
    • HTTP
    • Log
    • Network
    • Observer
    • Orchestrator
    • Organization
    • Package
    • Process
    • Registry
    • Related
    • Rule
    • Server
    • Service
    • Source
    • Span
    • Threat
    • TLS
    • Trace
    • Transaction
    • URL
    • User
    • User agent
    • Volume
    • Vulnerability
      • Field Sets
      • Base
      • Agent
      • Client
      • Cloud
      • Container
      • Data Stream
      • Destination
      • Device
      • DLL
      • DNS
      • ECS
      • Email
      • Error
      • Event
      • FaaS
      • File
      • Group
      • Host
      • HTTP
      • Log
      • Network
      • Observer
      • Orchestrator
      • Organization
      • Package
      • Process
      • Registry
      • Related
      • Rule
      • Server
      • Service
      • Source
      • Span
      • Threat
      • TLS
      • Trace
      • Transaction
      • URL
      • User
      • User agent
      • Volume
      • Vulnerability
      • Field Sets
      • Base
      • Agent
      • Client
      • Cloud
      • Container
      • Data Stream
      • Destination
      • Device
      • DLL
      • DNS
      • ECS
      • Email
      • Error
      • Event
      • FaaS
      • File
      • Group
      • Host
      • HTTP
      • Log
      • Network
      • Observer
      • Orchestrator
      • Organization
      • Package
      • Process
      • Registry
      • Related
      • Rule
      • Server
      • Service
      • Source
      • Span
      • Threat
      • TLS
      • Trace
      • Transaction
      • URL
      • User
      • User agent
      • Volume
      • Vulnerability
  • OpenSearch REST API
    • Connect to Your Cluster
    • API Overview
    • Search APIs
    • Document APIs
    • Index & Template APIs
    • Cluster & CAT APIs
    • Managed Stack Limitations
    • Examples
      • Connect with cURL
      • Connect with Python
      • Connect with C#
      • Connect with Java
      • Query with Python
      • Export Data to CSV
Question? Give us feedback → (opens in a new tab)Edit this page
Hosted OpenSearch
Examples
Python Example

Language example

This page has moved to OpenSearch REST API.

cURL ExampleJava Example
© 2026 Logit.io Ltd, All rights reserved.