Returns saved source and rule-filter context for new incidents, or clearly identified current associations for older incidents. Current access and retention always apply. Optional incident_id, incident_scope (associated or workspace) and incident_mode (matched, warnings or all) on log queries reuse the normal query worker and budgets. Workspace expansion is explicit. Later search results are investigation context, not original alarm evidence.
Returns saved source and rule-filter context for new incidents, or clearly identified current associations for older incidents. Current access and retention always apply. Optional incident_id, incident_scope (associated or workspace) and incident_mode (matched, warnings or all) on log queries reuse the normal query worker and budgets. Workspace expansion is explicit. Later search results are investigation context, not original alarm evidence.
Browser session: __Host-mb_session cookie.
Machine management credentials in Authorization: Bearer. Check the permissions (scopes) required by the operation.
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
X-Request-ID
string
Server-generated request identifier. Include this when reporting an error; inbound values are not trusted.
application/problem+json
Field
Type and limits
Required
Meaning
$
Problem
Yes
—
$.code
string
Yes
Stable machine-readable error code
$.detail
string
Yes
Short localized explanation without internal error details
$.instance
string
Yes
Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource
$.message
string
Yes
Temporarily identical to detail for existing clients
$.message_key
string
Yes
Stable translation key for changing the displayed language without another request
$.message_params
object; {"additionalProperties":true}
Yes
Named, safely rendered message parameters; never arbitrary HTML
$.request_id
string; {"pattern":"^[0-9a-f]{32}$"}
Yes
Server-generated diagnostic identifier. It contains no login token or credential.
$.status
integer; {"maximum":599,"minimum":400}
Yes
—
$.title
string
Yes
Localized HTTP status title
$.type
string; {"const":"about:blank"}
Yes
—
Stable error codes
csrf
insufficient_scope
invalid_origin
operator_required
forbidden
Header
Type and limits
Meaning
Cache-Control
string; {"pattern":"(?:^|,\\s*)no-store(?:,|$)"}
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
X-Request-ID
string
Server-generated request identifier. Include this when reporting an error; inbound values are not trusted.
application/problem+json
Field
Type and limits
Required
Meaning
$
Problem
Yes
—
$.code
string
Yes
Stable machine-readable error code
$.detail
string
Yes
Short localized explanation without internal error details
$.instance
string
Yes
Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource
$.message
string
Yes
Temporarily identical to detail for existing clients
$.message_key
string
Yes
Stable translation key for changing the displayed language without another request
$.message_params
object; {"additionalProperties":true}
Yes
Named, safely rendered message parameters; never arbitrary HTML
$.request_id
string; {"pattern":"^[0-9a-f]{32}$"}
Yes
Server-generated diagnostic identifier. It contains no login token or credential.
$.status
integer; {"maximum":599,"minimum":400}
Yes
—
$.title
string
Yes
Localized HTTP status title
$.type
string; {"const":"about:blank"}
Yes
—
Stable error codes
invalid_workspace
not_found
Header
Type and limits
Meaning
Cache-Control
string; {"pattern":"(?:^|,\\s*)no-store(?:,|$)"}
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
X-Request-ID
string
Server-generated request identifier. Include this when reporting an error; inbound values are not trusted.
application/problem+json
Field
Type and limits
Required
Meaning
$
Problem
Yes
—
$.code
string
Yes
Stable machine-readable error code
$.detail
string
Yes
Short localized explanation without internal error details
$.instance
string
Yes
Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource
$.message
string
Yes
Temporarily identical to detail for existing clients
$.message_key
string
Yes
Stable translation key for changing the displayed language without another request
$.message_params
object; {"additionalProperties":true}
Yes
Named, safely rendered message parameters; never arbitrary HTML
$.request_id
string; {"pattern":"^[0-9a-f]{32}$"}
Yes
Server-generated diagnostic identifier. It contains no login token or credential.
$.status
integer; {"maximum":599,"minimum":400}
Yes
—
$.title
string
Yes
Localized HTTP status title
$.type
string; {"const":"about:blank"}
Yes
—
Stable error codes
invalid_workspace
stale_check
result_conflict
Header
Type and limits
Meaning
Cache-Control
string; {"pattern":"(?:^|,\\s*)no-store(?:,|$)"}
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
X-Request-ID
string
Server-generated request identifier. Include this when reporting an error; inbound values are not trusted.
application/problem+json
Field
Type and limits
Required
Meaning
$
Problem
Yes
—
$.code
string
Yes
Stable machine-readable error code
$.detail
string
Yes
Short localized explanation without internal error details
$.instance
string
Yes
Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource
$.message
string
Yes
Temporarily identical to detail for existing clients
$.message_key
string
Yes
Stable translation key for changing the displayed language without another request
$.message_params
object; {"additionalProperties":true}
Yes
Named, safely rendered message parameters; never arbitrary HTML
$.request_id
string; {"pattern":"^[0-9a-f]{32}$"}
Yes
Server-generated diagnostic identifier. It contains no login token or credential.
$.status
integer; {"maximum":599,"minimum":400}
Yes
—
$.title
string
Yes
Localized HTTP status title
$.type
string; {"const":"about:blank"}
Yes
—
Stable error codes
invalid_config
invalid_monitor
Header
Type and limits
Meaning
Cache-Control
string; {"pattern":"(?:^|,\\s*)no-store(?:,|$)"}
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
X-Request-ID
string
Server-generated request identifier. Include this when reporting an error; inbound values are not trusted.
application/problem+json
Field
Type and limits
Required
Meaning
$
Problem
Yes
—
$.code
string
Yes
Stable machine-readable error code
$.detail
string
Yes
Short localized explanation without internal error details
$.instance
string
Yes
Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource
$.message
string
Yes
Temporarily identical to detail for existing clients
$.message_key
string
Yes
Stable translation key for changing the displayed language without another request
$.message_params
object; {"additionalProperties":true}
Yes
Named, safely rendered message parameters; never arbitrary HTML
$.request_id
string; {"pattern":"^[0-9a-f]{32}$"}
Yes
Server-generated diagnostic identifier. It contains no login token or credential.
$.status
integer; {"maximum":599,"minimum":400}
Yes
—
$.title
string
Yes
Localized HTTP status title
$.type
string; {"const":"about:blank"}
Yes
—
Stable error codes
invalid_workspace
check_capacity
Header
Type and limits
Meaning
Retry-After
string; {"pattern":"^[0-9]+$"}
Temporary server error; retry unchanged with Retry-After and the same idempotency identifier
application/problem+json
Field
Type and limits
Required
Meaning
$
Problem
Yes
—
$.code
string
Yes
Stable machine-readable error code
$.detail
string
Yes
Short localized explanation without internal error details
$.instance
string
Yes
Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource
$.message
string
Yes
Temporarily identical to detail for existing clients
$.message_key
string
Yes
Stable translation key for changing the displayed language without another request
$.message_params
object; {"additionalProperties":true}
Yes
Named, safely rendered message parameters; never arbitrary HTML
$.request_id
string; {"pattern":"^[0-9a-f]{32}$"}
Yes
Server-generated diagnostic identifier. It contains no login token or credential.
$.status
integer; {"maximum":599,"minimum":400}
Yes
—
$.title
string
Yes
Localized HTTP status title
$.type
string; {"const":"about:blank"}
Yes
—
Stable error codes
check_location_unavailable
feature_unavailable
log_admission_busy
log_queue_full
log_storage_unavailable
unavailable
account_busy
database_lock_timeout
database_timeout
database_unavailable
database_error
request_cancelled
Header
Type and limits
Meaning
Cache-Control
string; {"pattern":"(?:^|,\\s*)no-store(?:,|$)"}
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
X-Request-ID
string
Server-generated request identifier. Include this when reporting an error; inbound values are not trusted.
application/problem+json
Field
Type and limits
Required
Meaning
$
Problem
Yes
—
$.code
string
Yes
Stable machine-readable error code
$.detail
string
Yes
Short localized explanation without internal error details
$.instance
string
Yes
Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource
$.message
string
Yes
Temporarily identical to detail for existing clients
$.message_key
string
Yes
Stable translation key for changing the displayed language without another request
$.message_params
object; {"additionalProperties":true}
Yes
Named, safely rendered message parameters; never arbitrary HTML
$.request_id
string; {"pattern":"^[0-9a-f]{32}$"}
Yes
Server-generated diagnostic identifier. It contains no login token or credential.
$.status
integer; {"maximum":599,"minimum":400}
Yes
—
$.title
string
Yes
Localized HTTP status title
$.type
string; {"const":"about:blank"}
Yes
—
Stable error codes
log_limit
request_too_large
Header
Type and limits
Meaning
Cache-Control
string; {"pattern":"(?:^|,\\s*)no-store(?:,|$)"}
Private API responses prohibit storage. Public OAuth metadata is cached for 300 seconds; live streams additionally prohibit transformation.
Content-Language
string; {"enum":["en","de"]}
Language of human-readable response text, resolved from Accept-Language or the documented browser preference. Technical codes and identifiers remain stable.
X-Request-ID
string
Server-generated request identifier. Include this when reporting an error; inbound values are not trusted.
application/problem+json
Field
Type and limits
Required
Meaning
$
Problem
Yes
—
$.code
string
Yes
Stable machine-readable error code
$.detail
string
Yes
Short localized explanation without internal error details
$.instance
string
Yes
Unique relative identifier /api/v1/requests/{request_id}; not a retrievable resource
$.message
string
Yes
Temporarily identical to detail for existing clients
$.message_key
string
Yes
Stable translation key for changing the displayed language without another request
$.message_params
object; {"additionalProperties":true}
Yes
Named, safely rendered message parameters; never arbitrary HTML
$.request_id
string; {"pattern":"^[0-9a-f]{32}$"}
Yes
Server-generated diagnostic identifier. It contains no login token or credential.
Additional exact field-value counts to calculate for the complete filtered time range. Omit when not needed; normal search still returns the complete count, histogram and message patterns.
Replace demo IDs, timestamps and placeholders with your own values. For a retry, keep the same IDs, time and content. These examples do not run requests on this page.
Keep login links, codes, cookies and keys private. Do not print them in logs or share them in support requests.
Report a selected log stream’s collection or delivery state. A ready status alone does not prove complete delivery; cursor checkpoints are acknowledged together with their log batches. Buffered interruptions remain pending until continuity is confirmed.