@@ -2962,10 +2962,7 @@ components:
29622962 data_source:
29632963 $ref: '#/components/schemas/FormulaAndFunctionEventsDataSource'
29642964 group_by:
2965- description: Group by options.
2966- items:
2967- $ref: '#/components/schemas/FormulaAndFunctionEventQueryGroupBy'
2968- type: array
2965+ $ref: '#/components/schemas/FormulaAndFunctionEventQueryGroupByConfig'
29692966 indexes:
29702967 description: An array of index names to query in the stream. Omit or use
29712968 `[]` to query all indexes at once.
@@ -3037,6 +3034,39 @@ components:
30373034 required:
30383035 - facet
30393036 type: object
3037+ FormulaAndFunctionEventQueryGroupByConfig:
3038+ description: Group by configuration for a formula and functions events query.
3039+ Can be a list of facet objects or a flat object with a list of fields.
3040+ oneOf:
3041+ - $ref: '#/components/schemas/FormulaAndFunctionEventQueryGroupByList'
3042+ - $ref: '#/components/schemas/FormulaAndFunctionEventQueryGroupByFields'
3043+ FormulaAndFunctionEventQueryGroupByFields:
3044+ description: Flat group by using multiple event facets.
3045+ properties:
3046+ fields:
3047+ description: List of event facets to group by.
3048+ example:
3049+ - hostname
3050+ - service
3051+ items:
3052+ description: Event facet.
3053+ type: string
3054+ type: array
3055+ limit:
3056+ description: Number of groups to return.
3057+ example: 10
3058+ format: int64
3059+ type: integer
3060+ sort:
3061+ $ref: '#/components/schemas/FormulaAndFunctionEventQueryGroupBySort'
3062+ required:
3063+ - fields
3064+ type: object
3065+ FormulaAndFunctionEventQueryGroupByList:
3066+ description: List of objects used to group by.
3067+ items:
3068+ $ref: '#/components/schemas/FormulaAndFunctionEventQueryGroupBy'
3069+ type: array
30403070 FormulaAndFunctionEventQueryGroupBySort:
30413071 description: Options for sorting group by results.
30423072 properties:
0 commit comments