Logs

Send your logs to your Datadog platform over HTTP. Limits per HTTP request are:

• Maximum content size per payload: 5MB
• Maximum size for a single log: 256kB
• Maximum array size if sending multiple logs in an array: 500 entries

Any log exceeding 256KB is accepted and truncated by Datadog: - For a single log request, the API truncates the log at 256KB and returns a 2xx. - For a multi-logs request, the API processes all logs, truncates only logs larger than 256KB, and returns a 2xx.

We encourage you to send your logs compressed.

Note: If you are in the Datadog EU site (app.datadoghq.eu), the HTTP log endpoint is http-intake.logs.datadoghq.eu.

Get a list of logs

post https://api.datadoghq.comhttps://api.datadoghq.eu/api/v1/logs-queries/list

Overview

List endpoint returns logs that match a log search query. Results are paginated.

If you are considering archiving logs for your organization, consider use of the Datadog archive capabilities instead of the log list API. See Datadog Logs Archive documentation.

Request

Body Data (required)

Logs filter

{
  "index": "retention-3,retention-15",
  "limit": "integer",
  "query": "service:web* AND @http.status_code:[200 TO 299]",
  "sort": "string",
  "startAt": "string",
  "time": {
    "from": "2020-02-02T02:02:02Z",
    "timezone": "string",
    "to": "2020-02-02T20:20:20Z"
  }
}

Response

• 200
• 400
• 403

{
  "logs": [
    {
      "content": {
        "attributes": [
          {}
        ],
        "host": "i-0123",
        "message": "Host connected to remote",
        "service": "agent",
        "tags": [
          "team:A"
        ],
        "timestamp": "2020-05-26T13:36:14Z"
      },
      "id": "AAAAAWgN8Xwgr1vKDQAAAABBV2dOOFh3ZzZobm1mWXJFYTR0OA"
    }
  ],
  "nextLogId": "string",
  "status": "string"
}

{
  "error": {
    "code": "string",
    "details": [],
    "message": "string"
  }
}

{
  "errors": [
    "Bad Request"
  ]
}

Code Example

                                        # Curl command
curl -X post https://api.datadoghq.comhttps://api.datadoghq.eu/api/v1/logs-queries/list \
-H "Content-Type: application/json" \
-H "DD-API-KEY: ${DD_CLIENT_API_KEY}" \
-H "DD-APPLICATION-KEY: ${DD_CLIENT_APP_KEY}" \
-d @- << EOF
{
  "query": "service:web* AND @http.status_code:[200 TO 299]",
  "time": {
    "from": "2020-02-02T02:02:02Z",
    "to": "2020-02-02T20:20:20Z"
  }
}
EOF

                                        

package main

import (
    "context"
    "fmt"
    "os"
    datadog "github.com/DataDog/datadog-api-client-go/api/v1/datadog"
)

func main() {
    ctx := context.WithValue(
        context.Background(),
        datadog.ContextAPIKeys,
        map[string]datadog.APIKey{
            "apiKeyAuth": {
                Key: os.Getenv("DD_CLIENT_API_KEY"),
            },
            "appKeyAuth": {
                Key: os.Getenv("DD_CLIENT_APP_KEY"),
            },
        },
    )

    body := datadog.LogsListRequest{Index: "Index_example", Limit: 123, Query: "Query_example", Sort: datadog.LogsSort{}, StartAt: "StartAt_example", Time: datadog.LogsListRequest_time{From: "TODO", Timezone: "Timezone_example", To: "TODO"}} // LogsListRequest | Logs filter

    configuration := datadog.NewConfiguration()
    api_client := datadog.NewAPIClient(configuration)
    resp, r, err := api_client.LogsApi.ListLogs(ctx, body).Execute()
    if err != nil {
        fmt.Fprintf(os.Stderr, "Error when calling `LogsApi.ListLogs``: %v\n", err)
        fmt.Fprintf(os.Stderr, "Full HTTP response: %v\n", r)
    }
    // response from `ListLogs`: LogsListResponse
    fmt.Fprintf(os.Stdout, "Response from `LogsApi.ListLogs`: %v\n", resp)
}

// Import classes:
import com.datadog.api.v1.client.ApiClient;
import com.datadog.api.v1.client.ApiException;
import com.datadog.api.v1.client.Configuration;
import com.datadog.api.v1.client.auth.*;
import com.datadog.api.v1.client.models.*;
import com.datadog.api.v1.client.api.LogsApi;

public class Example {
    public static void main(String[] args) {
        ApiClient defaultClient = Configuration.getDefaultApiClient();
        // Configure the Datadog site to send API calls to
        HashMap<String, String> serverVariables = new HashMap<String, String>();
        String site = System.getenv("DD_SITE");
        if (site != null) {
            serverVariables.put("site", site);
            defaultClient.setServerVariables(serverVariables);
        }
        // Configure API key authorization: 
        HashMap<String, String> secrets = new HashMap<String, String>();
        secrets.put("apiKeyAuth", System.getenv("DD_CLIENT_API_KEY"));
        secrets.put("appKeyAuth", System.getenv("DD_CLIENT_APP_KEY"));
        defaultClient.configureApiKeys(secrets);

        LogsApi apiInstance = new LogsApi(defaultClient);
        LogsListRequest body = new LogsListRequest(); // LogsListRequest | Logs filter
        try {
            LogsListResponse result = api.listLogs()
                .body(body)
                .execute();
            System.out.println(result);
        } catch (ApiException e) {
            System.err.println("Exception when calling LogsApi#listLogs");
            System.err.println("Status code: " + e.getCode());
            System.err.println("Reason: " + e.getResponseBody());
            System.err.println("Response headers: " + e.getResponseHeaders());
            e.printStackTrace();
        }
    }
}

Send logs

post https://http-intake.logs.datadoghq.comhttps://http-intake.logs.datadoghq.eu/v1/input

Overview

Send your logs to your Datadog platform over HTTP. Limits per HTTP request are as follows. - Maximum content size per payload is 5MB. - Maximum size for a single log is 256kB. - Maximum array size if sending multiple logs in an array is 500 entries.

Any log exceeding 256KB is accepted and truncated by server - For a single log request, the API truncates the log at 256KB and returns a 2xx. - For a multi-logs request, the API processes all logs, truncates only logs larger than 256KB, and returns a 2xx.

We encourage you to send your logs compressed.

Note: If you are in the Datadog EU site (app.datadoghq.eu), the HTTP log endpoint is http-intake.logs.datadoghq.eu.

Arguments

Header Parameters

Request

Body Data (required)

Log to send (JSON format).

{
  "ddsource": "nginx",
  "ddtags": "env:staging,service:payment",
  "hostname": "i-012345678",
  "message": "2019-11-19T14:37:58,995 INFO [process.name][20081] Hello World"
}

Response

• 200
• default

{}

{
  "code": 0,
  "message": ""
}

Code Example

                                        # Curl command
curl -X post https://http-intake.logs.datadoghq.comhttps://http-intake.logs.datadoghq.eu/v1/input \
-H "Content-Type: application/json" \
-H "DD-API-KEY: ${DD_CLIENT_API_KEY}" \
-d @- << EOF
{}
EOF