Filter Structure
Filters are passed in the request body as a JSON object:Filter Operators
| Operator | Description | Example |
|---|---|---|
| “ (empty) | Equal | {"operator": "", "value": [100]} |
iexact | Case insensitive equal | {"operator": "iexact", "value": ["test"]} |
lt | Less than | {"operator": "lt", "value": [100]} |
lte | Less than or equal | {"operator": "lte", "value": [100]} |
gt | Greater than | {"operator": "gt", "value": [100]} |
gte | Greater than or equal | {"operator": "gte", "value": [100]} |
contains | Contains substring | {"operator": "contains", "value": ["keyword"]} |
icontains | Case insensitive contains | {"operator": "icontains", "value": ["keyword"]} |
startswith | Starts with | {"operator": "startswith", "value": ["prefix"]} |
endswith | Ends with | {"operator": "endswith", "value": ["suffix"]} |
in | In list (array or text) | {"operator": "in", "value": ["val1", "val2"]} |
isnull | Is null | {"operator": "isnull", "value": [true]} |
not | Not equal | {"operator": "not", "value": [100]} |
Filter Examples
Numeric Filters
Filter by cost greater than $0.01:String Filters
Filter by customer identifier:Multiple Filters
Combine multiple conditions:Metadata Filters
To filter custom properties in metadata, prefix the field withmetadata__:
Query Parameters
Most endpoints also support these query parameters:| Parameter | Type | Default | Description |
|---|---|---|---|
start_time | ISO 8601 datetime | 1 hour ago | Start of time range |
end_time | ISO 8601 datetime | Current time | End of time range |
page | integer | 1 | Page number |
page_size | integer | 50 | Results per page (max 1000) |
sort_by | string | -timestamp | Field to sort by (prefix - for descending) |
environment | string | All | Filter by environment |