Search logs
Paginates through paginatedResponse, so responses use 206 with
Content-Range when the page is a subset and 200 when it is not.
How far that contract holds depends on the configured log provider.
The local provider slices the full result set, so offset and the
total in Content-Range behave as expected. The CloudWatch provider
cannot express offset in an Insights query: it ignores offset and
reports the length of the returned page as the total. Paging past
the first page there repeats results, so treat this endpoint as
single-page unless the deployment uses the local provider.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Query Parameters
Search query
Restrict the search to one source
Ignored by the CloudWatch provider; see the description above