Run a saved view

VIEW=$(curl -s http://localhost:5080/api/v1/saved_views/$VIEW_ID \
  -H "authorization: Bearer $MS_JWT")

END=$(date +%s)000000
START=$((END - $(echo "$VIEW" | jq .time_range_secs) * 1000000))

curl -X POST http://localhost:5080/api/v1/query \
  -H "authorization: Bearer $MS_JWT" \
  -H 'content-type: application/json' \
  -d "{\"org_id\":\"$MS_ORG\",
       \"language\":$(echo "$VIEW" | jq .language),
       \"statement\":$(echo "$VIEW" | jq .statement),
       \"time_range\":{\"start\":$START,\"end\":$END},
       \"stream\":{\"name\":$(echo "$VIEW" | jq .stream),\"stream_type\":\"logs\"}}"

VIEW=$(curl -s http://localhost:5080/api/v1/saved_views/$VIEW_ID \
  -H "authorization: Bearer $MS_JWT")

END=$(date +%s)000000
START=$((END - $(echo "$VIEW" | jq .time_range_secs) * 1000000))

curl -X POST http://localhost:5080/api/v1/query \
  -H "authorization: Bearer $MS_JWT" \
  -H 'content-type: application/json' \
  -d "{\"org_id\":\"$MS_ORG\",
       \"language\":$(echo "$VIEW" | jq .language),
       \"statement\":$(echo "$VIEW" | jq .statement),
       \"time_range\":{\"start\":$START,\"end\":$END},
       \"stream\":{\"name\":$(echo "$VIEW" | jq .stream),\"stream_type\":\"logs\"}}"

GET  /api/v1/saved_views/{id}
POST /api/v1/query

A saved view stores the language, the statement, the stream, and a relative time_range_secs. There is no separate run endpoint. The web application follows this two-request flow, which needs saved_views.read and streams.query:

Load the view with GET /api/v1/saved_views/{id}.
Compute an absolute range that ends now: end is the current time in microseconds, and start is end minus time_range_secs times 1,000,000.
Send the stored language and statement, the computed time_range, and the stream to Execute a query.

VIEW=$(curl -s http://localhost:5080/api/v1/saved_views/$VIEW_ID \
  -H "authorization: Bearer $MS_JWT")

END=$(date +%s)000000
START=$((END - $(echo "$VIEW" | jq .time_range_secs) * 1000000))

curl -X POST http://localhost:5080/api/v1/query \
  -H "authorization: Bearer $MS_JWT" \
  -H 'content-type: application/json' \
  -d "{\"org_id\":\"$MS_ORG\",
       \"language\":$(echo "$VIEW" | jq .language),
       \"statement\":$(echo "$VIEW" | jq .statement),
       \"time_range\":{\"start\":$START,\"end\":$END},
       \"stream\":{\"name\":$(echo "$VIEW" | jq .stream),\"stream_type\":\"logs\"}}"

The saved view stores the stream name without a type, so pass the stream type that the view belongs to.

Last modified on October 9, 2026

Overview

Authentication

Intake

Query

APM

RUM

Streams

Alerting

Correlation & Web

Platform & Administration