Get the SLO definitions
You must have the read
privileges for the SLOs feature in the Observability section of the Kibana feature privileges.
Path parameters
-
spaceId
string Required An identifier for the space. If
/s/
and the identifier are omitted from the path, the default space is used.
Query parameters
-
includeOutdatedOnly
boolean Indicates if the API returns only outdated SLO or all SLO definitions
-
search
string Filters the SLOs by name
-
page
number The page to use for pagination, must be greater or equal than 1
-
perPage
integer Number of SLOs returned by page
Maximum value is
1000
. Default value is100
.
Responses
-
200 application/json
Successful request
A paginated response of SLO definitions matching the query.
One of: Hide attributes Show attributes
-
page
number -
perPage
number -
results
array[object] Hide results attributes Show results attributes object
-
budgetingMethod
string Required The budgeting method to use when computing the rollup data.
Values are
occurrences
ortimeslices
. -
createdAt
string Required The creation date
-
description
string Required The description of the SLO.
-
enabled
boolean Required Indicate if the SLO is enabled
groupBy
string | array[string] Required optional group by field or fields to use to generate an SLO per distinct value
-
id
string Required The identifier of the SLO.
indicator
object Required One of: Defines properties for a custom query indicator type
Hide attributes Show attributes
-
params
object Required An object containing the indicator parameters.
Hide params attributes Show params attributes object
-
dataViewId
string The kibana data view id to use, primarily used to include data view runtime mappings. Make sure to save SLO again if you add/update run time fields to the data view and if those fields are being used in slo queries.
-
index
string Required The index or index pattern to use
-
timestampField
string Required The timestamp field used in the source indice.
-
-
type
string Required Discriminator The type of indicator.
Value is
sli.kql.custom
.
Defines properties for the APM availability indicator type
Hide attributes Show attributes
-
params
object Required An object containing the indicator parameters.
Hide params attributes Show params attributes object
-
environment
string Required The APM service environment or "*"
-
filter
string KQL query used for filtering the data
-
index
string Required The index used by APM metrics
-
service
string Required The APM service name
-
transactionName
string Required The APM transaction name or "*"
-
transactionType
string Required The APM transaction type or "*"
-
-
type
string Required Discriminator The type of indicator.
Value is
sli.apm.transactionErrorRate
.
Defines properties for the APM latency indicator type
Hide attributes Show attributes
-
params
object Required An object containing the indicator parameters.
Hide params attributes Show params attributes object
-
environment
string Required The APM service environment or "*"
-
filter
string KQL query used for filtering the data
-
index
string Required The index used by APM metrics
-
service
string Required The APM service name
-
threshold
number Required The latency threshold in milliseconds
-
transactionName
string Required The APM transaction name or "*"
-
transactionType
string Required The APM transaction type or "*"
-
-
type
string Required Discriminator The type of indicator.
Value is
sli.apm.transactionDuration
.
Defines properties for a custom metric indicator type
Hide attributes Show attributes
-
params
object Required An object containing the indicator parameters.
Hide params attributes Show params attributes object
-
dataViewId
string The kibana data view id to use, primarily used to include data view runtime mappings. Make sure to save SLO again if you add/update run time fields to the data view and if those fields are being used in slo queries.
-
filter
string the KQL query to filter the documents with.
-
good
object Required An object defining the "good" metrics and equation
Hide good attributes Show good attributes object
-
equation
string Required The equation to calculate the "good" metric.
-
metrics
array[object] Required List of metrics with their name, aggregation type, and field.
One of: Hide attributes Show attributes
-
aggregation
string Required The aggregation type of the metric.
Value is
sum
. -
field
string Required The field of the metric.
-
filter
string The filter to apply to the metric.
-
name
string Required The name of the metric. Only valid options are A-Z
Format should match the following pattern:
^[A-Z]$
.
Hide attributes Show attributes
-
aggregation
string Required The aggregation type of the metric.
Value is
doc_count
. -
filter
string The filter to apply to the metric.
-
name
string Required The name of the metric. Only valid options are A-Z
Format should match the following pattern:
^[A-Z]$
.
-
-
-
index
string Required The index or index pattern to use
-
timestampField
string Required The timestamp field used in the source indice.
-
total
object Required An object defining the "total" metrics and equation
Hide total attributes Show total attributes object
-
equation
string Required The equation to calculate the "total" metric.
-
metrics
array[object] Required List of metrics with their name, aggregation type, and field.
One of: Hide attributes Show attributes
-
aggregation
string Required The aggregation type of the metric.
Value is
sum
. -
field
string Required The field of the metric.
-
filter
string The filter to apply to the metric.
-
name
string Required The name of the metric. Only valid options are A-Z
Format should match the following pattern:
^[A-Z]$
.
Hide attributes Show attributes
-
aggregation
string Required The aggregation type of the metric.
Value is
doc_count
. -
filter
string The filter to apply to the metric.
-
name
string Required The name of the metric. Only valid options are A-Z
Format should match the following pattern:
^[A-Z]$
.
-
-
-
-
type
string Required Discriminator The type of indicator.
Value is
sli.metric.custom
.
Defines properties for a histogram indicator type
Hide attributes Show attributes
-
params
object Required An object containing the indicator parameters.
Hide params attributes Show params attributes object
-
dataViewId
string The kibana data view id to use, primarily used to include data view runtime mappings. Make sure to save SLO again if you add/update run time fields to the data view and if those fields are being used in slo queries.
-
filter
string the KQL query to filter the documents with.
-
good
object Required An object defining the "good" events
Hide good attributes Show good attributes object
-
aggregation
string Required The type of aggregation to use.
Values are
value_count
orrange
. -
field
string Required The field use to aggregate the good events.
-
filter
string The filter for good events.
-
from
number The starting value of the range. Only required for "range" aggregations.
-
to
number The ending value of the range. Only required for "range" aggregations.
-
-
index
string Required The index or index pattern to use
-
timestampField
string Required The timestamp field used in the source indice.
-
total
object Required An object defining the "total" events
Hide total attributes Show total attributes object
-
aggregation
string Required The type of aggregation to use.
Values are
value_count
orrange
. -
field
string Required The field use to aggregate the good events.
-
filter
string The filter for total events.
-
from
number The starting value of the range. Only required for "range" aggregations.
-
to
number The ending value of the range. Only required for "range" aggregations.
-
-
-
type
string Required Discriminator The type of indicator.
Value is
sli.histogram.custom
.
Defines properties for a timeslice metric indicator type
Hide attributes Show attributes
-
params
object Required An object containing the indicator parameters.
Hide params attributes Show params attributes object
-
dataViewId
string The kibana data view id to use, primarily used to include data view runtime mappings. Make sure to save SLO again if you add/update run time fields to the data view and if those fields are being used in slo queries.
-
filter
string the KQL query to filter the documents with.
-
index
string Required The index or index pattern to use
-
metric
object Required An object defining the metrics, equation, and threshold to determine if it's a good slice or not
Hide metric attributes Show metric attributes object
-
comparator
string Required The comparator to use to compare the equation to the threshold.
Values are
GT
,GTE
,LT
, orLTE
. -
equation
string Required The equation to calculate the metric.
-
metrics
array[object] Required List of metrics with their name, aggregation type, and field.
Any of: Hide attributes Show attributes
-
aggregation
string Required The aggregation type of the metric.
Values are
sum
,avg
,min
,max
,std_deviation
,last_value
, orcardinality
. -
field
string Required The field of the metric.
-
filter
string The filter to apply to the metric.
-
name
string Required The name of the metric. Only valid options are A-Z
Format should match the following pattern:
^[A-Z]$
.
Hide attributes Show attributes
-
aggregation
string Required The aggregation type of the metric. Only valid option is "percentile"
Value is
percentile
. -
field
string Required The field of the metric.
-
filter
string The filter to apply to the metric.
-
name
string Required The name of the metric. Only valid options are A-Z
Format should match the following pattern:
^[A-Z]$
. -
percentile
number Required The percentile value.
Hide attributes Show attributes
-
aggregation
string Required The aggregation type of the metric. Only valid option is "doc_count"
Value is
doc_count
. -
filter
string The filter to apply to the metric.
-
name
string Required The name of the metric. Only valid options are A-Z
Format should match the following pattern:
^[A-Z]$
.
-
-
threshold
number Required The threshold used to determine if the metric is a good slice or not.
-
-
timestampField
string Required The timestamp field used in the source indice.
-
-
type
string Required Discriminator The type of indicator.
Value is
sli.metric.timeslice
.
-
-
instanceId
string Required the value derived from the groupBy field, if present, otherwise '*'
-
name
string Required The name of the SLO.
-
objective
object Required Defines properties for the SLO objective
Hide objective attributes Show objective attributes object
-
target
number Required the target objective between 0 and 1 excluded
Minimum value is
0
, maximum value is100
. -
timesliceTarget
number the target objective for each slice when using a timeslices budgeting method
Minimum value is
0
, maximum value is100
. -
timesliceWindow
string the duration of each slice when using a timeslices budgeting method, as {duraton}{unit}
-
-
revision
number Required The SLO revision
-
settings
object Required Defines properties for SLO settings.
Hide settings attributes Show settings attributes object
-
frequency
string The interval between checks for changes in the source data. The minimum value is 1m and the maximum is 59m. The default value is 1 minute.
Default value is
1m
. -
preventInitialBackfill
boolean Start aggregating data from the time the SLO is created, instead of backfilling data from the beginning of the time window.
Default value is
false
. -
syncDelay
string The time delay in minutes between the current time and the latest source data time. Increasing the value will delay any alerting. The default value is 1 minute. The minimum value is 1m and the maximum is 359m. It should always be greater then source index refresh interval.
Default value is
1m
. -
syncField
string The date field that is used to identify new documents in the source. It is strongly recommended to use a field that contains the ingest timestamp. If you use a different field, you might need to set the delay such that it accounts for data transmission delays. When unspecified, we use the indicator timestamp field.
-
-
summary
object Required The SLO computed data
Hide summary attributes Show summary attributes object
-
errorBudget
object Required Hide errorBudget attributes Show errorBudget attributes object
-
consumed
number Required The error budget consummed, as a percentage of the initial value.
-
initial
number Required The initial error budget, as 1 - objective
-
isEstimated
boolean Required Only for SLO defined with occurrences budgeting method and calendar aligned time window.
-
remaining
number Required The error budget remaining, as a percentage of the initial value.
-
-
sliValue
number Required -
status
string Required Values are
NO_DATA
,HEALTHY
,DEGRADING
, orVIOLATED
.
-
-
tags
array[string] Required List of tags
-
timeWindow
object Required Defines properties for the SLO time window
Hide timeWindow attributes Show timeWindow attributes object
-
duration
string Required the duration formatted as {duration}{unit}. Accepted values for rolling: 7d, 30d, 90d. Accepted values for calendar aligned: 1w (weekly) or 1M (monthly)
-
type
string Required Indicates weither the time window is a rolling or a calendar aligned time window.
Values are
rolling
orcalendarAligned
.
-
-
updatedAt
string Required The last update date
-
version
number Required The internal SLO version
-
-
total
number
Hide attributes Show attributes
-
page
number for backward compability
Default value is
1
. -
perPage
number for backward compability
-
results
array[object] Hide results attributes Show results attributes object
-
budgetingMethod
string Required The budgeting method to use when computing the rollup data.
Values are
occurrences
ortimeslices
. -
createdAt
string Required The creation date
-
description
string Required The description of the SLO.
-
enabled
boolean Required Indicate if the SLO is enabled
groupBy
string | array[string] Required optional group by field or fields to use to generate an SLO per distinct value
-
id
string Required The identifier of the SLO.
indicator
object Required One of: Defines properties for a custom query indicator type
Hide attributes Show attributes
-
params
object Required An object containing the indicator parameters.
Hide params attributes Show params attributes object
-
dataViewId
string The kibana data view id to use, primarily used to include data view runtime mappings. Make sure to save SLO again if you add/update run time fields to the data view and if those fields are being used in slo queries.
-
index
string Required The index or index pattern to use
-
timestampField
string Required The timestamp field used in the source indice.
-
-
type
string Required Discriminator The type of indicator.
Value is
sli.kql.custom
.
Defines properties for the APM availability indicator type
Hide attributes Show attributes
-
params
object Required An object containing the indicator parameters.
Hide params attributes Show params attributes object
-
environment
string Required The APM service environment or "*"
-
filter
string KQL query used for filtering the data
-
index
string Required The index used by APM metrics
-
service
string Required The APM service name
-
transactionName
string Required The APM transaction name or "*"
-
transactionType
string Required The APM transaction type or "*"
-
-
type
string Required Discriminator The type of indicator.
Value is
sli.apm.transactionErrorRate
.
Defines properties for the APM latency indicator type
Hide attributes Show attributes
-
params
object Required An object containing the indicator parameters.
Hide params attributes Show params attributes object
-
environment
string Required The APM service environment or "*"
-
filter
string KQL query used for filtering the data
-
index
string Required The index used by APM metrics
-
service
string Required The APM service name
-
threshold
number Required The latency threshold in milliseconds
-
transactionName
string Required The APM transaction name or "*"
-
transactionType
string Required The APM transaction type or "*"
-
-
type
string Required Discriminator The type of indicator.
Value is
sli.apm.transactionDuration
.
Defines properties for a custom metric indicator type
Hide attributes Show attributes
-
params
object Required An object containing the indicator parameters.
Hide params attributes Show params attributes object
-
dataViewId
string The kibana data view id to use, primarily used to include data view runtime mappings. Make sure to save SLO again if you add/update run time fields to the data view and if those fields are being used in slo queries.
-
filter
string the KQL query to filter the documents with.
-
good
object Required An object defining the "good" metrics and equation
Hide good attributes Show good attributes object
-
equation
string Required The equation to calculate the "good" metric.
-
metrics
array[object] Required List of metrics with their name, aggregation type, and field.
One of: Hide attributes Show attributes
-
aggregation
string Required The aggregation type of the metric.
Value is
sum
. -
field
string Required The field of the metric.
-
filter
string The filter to apply to the metric.
-
name
string Required The name of the metric. Only valid options are A-Z
Format should match the following pattern:
^[A-Z]$
.
Hide attributes Show attributes
-
aggregation
string Required The aggregation type of the metric.
Value is
doc_count
. -
filter
string The filter to apply to the metric.
-
name
string Required The name of the metric. Only valid options are A-Z
Format should match the following pattern:
^[A-Z]$
.
-
-
-
index
string Required The index or index pattern to use
-
timestampField
string Required The timestamp field used in the source indice.
-
total
object Required An object defining the "total" metrics and equation
Hide total attributes Show total attributes object
-
equation
string Required The equation to calculate the "total" metric.
-
metrics
array[object] Required List of metrics with their name, aggregation type, and field.
One of: Hide attributes Show attributes
-
aggregation
string Required The aggregation type of the metric.
Value is
sum
. -
field
string Required The field of the metric.
-
filter
string The filter to apply to the metric.
-
name
string Required The name of the metric. Only valid options are A-Z
Format should match the following pattern:
^[A-Z]$
.
Hide attributes Show attributes
-
aggregation
string Required The aggregation type of the metric.
Value is
doc_count
. -
filter
string The filter to apply to the metric.
-
name
string Required The name of the metric. Only valid options are A-Z
Format should match the following pattern:
^[A-Z]$
.
-
-
-
-
type
string Required Discriminator The type of indicator.
Value is
sli.metric.custom
.
Defines properties for a histogram indicator type
Hide attributes Show attributes
-
params
object Required An object containing the indicator parameters.
Hide params attributes Show params attributes object
-
dataViewId
string The kibana data view id to use, primarily used to include data view runtime mappings. Make sure to save SLO again if you add/update run time fields to the data view and if those fields are being used in slo queries.
-
filter
string the KQL query to filter the documents with.
-
good
object Required An object defining the "good" events
Hide good attributes Show good attributes object
-
aggregation
string Required The type of aggregation to use.
Values are
value_count
orrange
. -
field
string Required The field use to aggregate the good events.
-
filter
string The filter for good events.
-
from
number The starting value of the range. Only required for "range" aggregations.
-
to
number The ending value of the range. Only required for "range" aggregations.
-
-
index
string Required The index or index pattern to use
-
timestampField
string Required The timestamp field used in the source indice.
-
total
object Required An object defining the "total" events
Hide total attributes Show total attributes object
-
aggregation
string Required The type of aggregation to use.
Values are
value_count
orrange
. -
field
string Required The field use to aggregate the good events.
-
filter
string The filter for total events.
-
from
number The starting value of the range. Only required for "range" aggregations.
-
to
number The ending value of the range. Only required for "range" aggregations.
-
-
-
type
string Required Discriminator The type of indicator.
Value is
sli.histogram.custom
.
Defines properties for a timeslice metric indicator type
Hide attributes Show attributes
-
params
object Required An object containing the indicator parameters.
Hide params attributes Show params attributes object
-
dataViewId
string The kibana data view id to use, primarily used to include data view runtime mappings. Make sure to save SLO again if you add/update run time fields to the data view and if those fields are being used in slo queries.
-
filter
string the KQL query to filter the documents with.
-
index
string Required The index or index pattern to use
-
metric
object Required An object defining the metrics, equation, and threshold to determine if it's a good slice or not
Hide metric attributes Show metric attributes object
-
comparator
string Required The comparator to use to compare the equation to the threshold.
Values are
GT
,GTE
,LT
, orLTE
. -
equation
string Required The equation to calculate the metric.
-
metrics
array[object] Required List of metrics with their name, aggregation type, and field.
Any of: Hide attributes Show attributes
-
aggregation
string Required The aggregation type of the metric.
Values are
sum
,avg
,min
,max
,std_deviation
,last_value
, orcardinality
. -
field
string Required The field of the metric.
-
filter
string The filter to apply to the metric.
-
name
string Required The name of the metric. Only valid options are A-Z
Format should match the following pattern:
^[A-Z]$
.
Hide attributes Show attributes
-
aggregation
string Required The aggregation type of the metric. Only valid option is "percentile"
Value is
percentile
. -
field
string Required The field of the metric.
-
filter
string The filter to apply to the metric.
-
name
string Required The name of the metric. Only valid options are A-Z
Format should match the following pattern:
^[A-Z]$
. -
percentile
number Required The percentile value.
Hide attributes Show attributes
-
aggregation
string Required The aggregation type of the metric. Only valid option is "doc_count"
Value is
doc_count
. -
filter
string The filter to apply to the metric.
-
name
string Required The name of the metric. Only valid options are A-Z
Format should match the following pattern:
^[A-Z]$
.
-
-
threshold
number Required The threshold used to determine if the metric is a good slice or not.
-
-
timestampField
string Required The timestamp field used in the source indice.
-
-
type
string Required Discriminator The type of indicator.
Value is
sli.metric.timeslice
.
-
-
instanceId
string Required the value derived from the groupBy field, if present, otherwise '*'
-
name
string Required The name of the SLO.
-
objective
object Required Defines properties for the SLO objective
Hide objective attributes Show objective attributes object
-
target
number Required the target objective between 0 and 1 excluded
Minimum value is
0
, maximum value is100
. -
timesliceTarget
number the target objective for each slice when using a timeslices budgeting method
Minimum value is
0
, maximum value is100
. -
timesliceWindow
string the duration of each slice when using a timeslices budgeting method, as {duraton}{unit}
-
-
revision
number Required The SLO revision
-
settings
object Required Defines properties for SLO settings.
Hide settings attributes Show settings attributes object
-
frequency
string The interval between checks for changes in the source data. The minimum value is 1m and the maximum is 59m. The default value is 1 minute.
Default value is
1m
. -
preventInitialBackfill
boolean Start aggregating data from the time the SLO is created, instead of backfilling data from the beginning of the time window.
Default value is
false
. -
syncDelay
string The time delay in minutes between the current time and the latest source data time. Increasing the value will delay any alerting. The default value is 1 minute. The minimum value is 1m and the maximum is 359m. It should always be greater then source index refresh interval.
Default value is
1m
. -
syncField
string The date field that is used to identify new documents in the source. It is strongly recommended to use a field that contains the ingest timestamp. If you use a different field, you might need to set the delay such that it accounts for data transmission delays. When unspecified, we use the indicator timestamp field.
-
-
summary
object Required The SLO computed data
Hide summary attributes Show summary attributes object
-
errorBudget
object Required Hide errorBudget attributes Show errorBudget attributes object
-
consumed
number Required The error budget consummed, as a percentage of the initial value.
-
initial
number Required The initial error budget, as 1 - objective
-
isEstimated
boolean Required Only for SLO defined with occurrences budgeting method and calendar aligned time window.
-
remaining
number Required The error budget remaining, as a percentage of the initial value.
-
-
sliValue
number Required -
status
string Required Values are
NO_DATA
,HEALTHY
,DEGRADING
, orVIOLATED
.
-
-
tags
array[string] Required List of tags
-
timeWindow
object Required Defines properties for the SLO time window
Hide timeWindow attributes Show timeWindow attributes object
-
duration
string Required the duration formatted as {duration}{unit}. Accepted values for rolling: 7d, 30d, 90d. Accepted values for calendar aligned: 1w (weekly) or 1M (monthly)
-
type
string Required Indicates weither the time window is a rolling or a calendar aligned time window.
Values are
rolling
orcalendarAligned
.
-
-
updatedAt
string Required The last update date
-
version
number Required The internal SLO version
-
-
searchAfter
array[string] the cursor to provide to get the next paged results
-
size
number -
total
number
-
-
400 application/json
Bad request
Hide response attributes Show response attributes object
-
error
string Required -
message
string Required -
statusCode
number Required
-
-
401 application/json
Unauthorized response
Hide response attributes Show response attributes object
-
error
string Required -
message
string Required -
statusCode
number Required
-
-
403 application/json
Unauthorized response
Hide response attributes Show response attributes object
-
error
string Required -
message
string Required -
statusCode
number Required
-
curl \
--request GET 'http://localhost:5622/s/default/internal/observability/slos/_definitions' \
--header "Authorization: $API_KEY" \
--header "kbn-xsrf: string"
{
"page": 1,
"perPage": 25,
"results": [
{
"budgetingMethod": "occurrences",
"createdAt": "2023-01-12T10:03:19.000Z",
"description": "My SLO description",
"enabled": true,
"groupBy": [
[
"service.name"
],
"service.name",
[
"service.name",
"service.environment"
]
],
"id": "8853df00-ae2e-11ed-90af-09bb6422b258",
"indicator": {
"params": {
"dataViewId": "03b80ab3-003d-498b-881c-3beedbaf1162",
"filter": "field.environment : \"production\" and service.name : \"my-service\"",
"good": "request.latency <= 150 and request.status_code : \"2xx\"",
"index": "my-service-*",
"timestampField": "timestamp",
"total": "field.environment : \"production\" and service.name : \"my-service\""
},
"type": "sli.kql.custom"
},
"instanceId": "host-abcde",
"name": "My Service SLO",
"objective": {
"target": 0.99,
"timesliceTarget": 0.995,
"timesliceWindow": "5m"
},
"revision": 2,
"settings": {
"frequency": "5m",
"preventInitialBackfill": true,
"syncDelay": "5m",
"syncField": "event.ingested"
},
"summary": {
"errorBudget": {
"consumed": 0.8,
"initial": 0.02,
"isEstimated": true,
"remaining": 0.2
},
"sliValue": 0.9836,
"status": "HEALTHY"
},
"tags": [
"string"
],
"timeWindow": {
"duration": "30d",
"type": "rolling"
},
"updatedAt": "2023-01-12T10:03:19.000Z",
"version": 2
}
],
"total": 34
}
{
"page": 1,
"perPage": 25,
"results": [
{
"budgetingMethod": "occurrences",
"createdAt": "2023-01-12T10:03:19.000Z",
"description": "My SLO description",
"enabled": true,
"groupBy": [
[
"service.name"
],
"service.name",
[
"service.name",
"service.environment"
]
],
"id": "8853df00-ae2e-11ed-90af-09bb6422b258",
"indicator": {
"params": {
"dataViewId": "03b80ab3-003d-498b-881c-3beedbaf1162",
"filter": "field.environment : \"production\" and service.name : \"my-service\"",
"good": "request.latency <= 150 and request.status_code : \"2xx\"",
"index": "my-service-*",
"timestampField": "timestamp",
"total": "field.environment : \"production\" and service.name : \"my-service\""
},
"type": "sli.kql.custom"
},
"instanceId": "host-abcde",
"name": "My Service SLO",
"objective": {
"target": 0.99,
"timesliceTarget": 0.995,
"timesliceWindow": "5m"
},
"revision": 2,
"settings": {
"frequency": "5m",
"preventInitialBackfill": true,
"syncDelay": "5m",
"syncField": "event.ingested"
},
"summary": {
"errorBudget": {
"consumed": 0.8,
"initial": 0.02,
"isEstimated": true,
"remaining": 0.2
},
"sliValue": 0.9836,
"status": "HEALTHY"
},
"tags": [
"string"
],
"timeWindow": {
"duration": "30d",
"type": "rolling"
},
"updatedAt": "2023-01-12T10:03:19.000Z",
"version": 2
}
],
"searchAfter": [
"some-slo-id",
"other-cursor-id"
],
"size": 25,
"total": 34
}
{
"error": "Bad Request",
"message": "Invalid value 'foo' supplied to: [...]",
"statusCode": 400
}
{
"error": "Unauthorized",
"message": "[security_exception\n\tRoot causes:\n\t\tsecurity_exception: unable to authenticate user [elastics] for REST request [/_security/_authenticate]]: unable to authenticate user [elastics] for REST request [/_security/_authenticate]",
"statusCode": 401
}
{
"error": "Unauthorized",
"message": "[security_exception\n\tRoot causes:\n\t\tsecurity_exception: unable to authenticate user [elastics] for REST request [/_security/_authenticate]]: unable to authenticate user [elastics] for REST request [/_security/_authenticate]",
"statusCode": 403
}