TIBCO LogLogic LMI - REST API does not support filter blok queries

book

Article ID: KB0073285

calendar_today

Updated On:

Products	Versions
TIBCO LogLogic Enterprise Virtual Appliance	LMI 6.2.1 - 6.3.0 and 6.3.1

Description

Whenever you try to run a REST API call query with following syntax:

{
  "query": "filter.[Microsoft_Windows_Monitor_User_Accounts] | sys_eventTime in -1h"
}

You will get an error like:

"Syntax Error: In EQL query, FILTER clause, parsing error at or near '|' at this point in the query: \"filter.[Microsoft_Windows_Monitor_User_Accounts] !!!|!!!"
Response Code
400

Issue/Introduction

Blok filters syntax is not allowed in TIBCO LogLogic LMI REST API calls

Resolution

In TIBCO LogLogic LMI versions 6.2.1, 6.3.x REST API calls does not support 'filter.blok' query syntax. Support for this kind of query will be integrated in future LMI versions.

Feedback

thumb_up Yes

thumb_down No