Describe the issue:
Wondering if there’s a way that we could directly invoke rest api request with some dql as payload and get the logs?
or another way to ask that question is how could I fetch the corresponding request body query with the dql: level.keyword:INFO
"query": {
"bool": {
"must": [],
"filter": [
{
"bool": {
"should": [
{
"match": {
"level.keyword": "INFO"
}
}
],
"minimum_should_match": 1
}
},
{
"range": {
"@timestamp": {
"gte": "2024-02-12T23:00:00.000Z",
"lte": "2024-02-12T23:30:00.000Z",
"format": "strict_date_optional_time"
}
}
}
],
"should": [],
"must_not": []
}
},