@@ -2962,10 +2962,7 @@ components:
29622962 data_source:
29632963 $ref: '#/components/schemas/FormulaAndFunctionEventsDataSource'
29642964 group_by:
2965- description: Group by options.
2966- items:
2967- $ref: '#/components/schemas/FormulaAndFunctionEventQueryGroupBy'
2968- type: array
2965+ $ref: '#/components/schemas/FormulaAndFunctionEventQueryGroupBy'
29692966 indexes:
29702967 description: An array of index names to query in the stream. Omit or use
29712968 `[]` to query all indexes at once.
@@ -3021,6 +3018,12 @@ components:
30213018 - query
30223019 type: object
30233020 FormulaAndFunctionEventQueryGroupBy:
3021+ description: Group by configuration for a formula and functions events query.
3022+ Can be a list of facet objects or a flat object with a list of fields.
3023+ oneOf:
3024+ - $ref: '#/components/schemas/FormulaAndFunctionEventQueryGroupByFacetList'
3025+ - $ref: '#/components/schemas/FormulaAndFunctionEventQueryGroupByFields'
3026+ FormulaAndFunctionEventQueryGroupByFacet:
30243027 description: List of objects used to group by.
30253028 properties:
30263029 facet:
@@ -3037,6 +3040,33 @@ components:
30373040 required:
30383041 - facet
30393042 type: object
3043+ FormulaAndFunctionEventQueryGroupByFacetList:
3044+ description: List of objects used to group by.
3045+ items:
3046+ $ref: '#/components/schemas/FormulaAndFunctionEventQueryGroupByFacet'
3047+ type: array
3048+ FormulaAndFunctionEventQueryGroupByFields:
3049+ description: Flat group by using multiple event facets.
3050+ properties:
3051+ fields:
3052+ description: List of event facets to group by.
3053+ example:
3054+ - hostname
3055+ - service
3056+ items:
3057+ description: Event facet.
3058+ type: string
3059+ type: array
3060+ limit:
3061+ description: Number of groups to return.
3062+ example: 10
3063+ format: int64
3064+ type: integer
3065+ sort:
3066+ $ref: '#/components/schemas/FormulaAndFunctionEventQueryGroupBySort'
3067+ required:
3068+ - fields
3069+ type: object
30403070 FormulaAndFunctionEventQueryGroupBySort:
30413071 description: Options for sorting group by results.
30423072 properties:
0 commit comments