TIBCO LogLogic LMI - REST API does not support filter blok queries

TIBCO LogLogic LMI - REST API does not support filter blok queries

book

Article ID: KB0073285

calendar_today

Updated On:

Products Versions
TIBCO LogLogic Enterprise Virtual Appliance LMI 6.2.1 - 6.3.0 and 6.3.1

Description

Whenever you try to run a REST API call query with following syntax:
  

{
  "query": "filter.[Microsoft_Windows_Monitor_User_Accounts] | sys_eventTime in -1h"
}

You will get an error like:
  
"Syntax Error: In EQL query, FILTER clause, parsing error at or near '|' at this point in the query: \"filter.[Microsoft_Windows_Monitor_User_Accounts] !!!|!!!"
Response Code
400

Resolution

In TIBCO LogLogic LMI versions 6.2.1, 6.3.x REST API calls does not support 'filter.blok' query syntax. Support for this kind of query will be integrated in future LMI versions.

Issue/Introduction

Blok filters syntax is not allowed in TIBCO LogLogic LMI REST API calls
Powered by Wolken Software