![]() |
VOOZH | about |
The geomap widget visualizes geographic data with shaded regions or points. It can be used to:
Choose the visualization layer:
Choose the data to graph:
Note: Support for data sources varies based on the visualization layer you select.
| Data source | Notes |
|---|---|
| Log Events | The group by tag must include a country ISO Code (alpha-2 ISO format) or a country subdivision ISO Code (ISO-3166-2 format). You can use the GeoIP Processor to do this, or manually include the tags on ingest. See the Log search documentation to configure a log event query. |
| Metric | The group by tag must include a country ISO Code (alpha-2 ISO format) or a country subdivision ISO Code (ISO-3166-2 format). You can generate metrics from ingested logs, or manually include the tags on ingest. See the querying documentation to configure a metric query. |
| RUM | See the RUM documentation to configure a RUM query. |
| SLO | See the SLO search documentation to configure an SLO query. |
| Security Signals App and API Protection Audit Trail | See the Log search documentation to configure a query. |
| Data source | Notes |
|---|---|
| Log Events | The group by tag must include a country ISO Code following the alpha-2 ISO format. You can use the GeoIP Processor to do this, or manually include the tags on ingest. See the Log search documentation to configure a log event query. |
| RUM | See the RUM documentation to configure a RUM query. |
Note: The Points layer shows a maximum of 100,000 events at a time.
(Optional) Under Visual Options, use the Set widget default view dropdown to select where to initially focus the map. Select Custom to define a custom region, or search for the name of a country, state, or province.
Context links are enabled by default, you can toggle them on or off. Context links connect dashboard widgets with other pages (in Datadog, or third-party).
Customize the region layer color of your Geomap widget with conditional rules.
This widget can be used with the Dashboards API. See the following table for the widget JSON schema definition:
Expand All
Field
Type
Description
custom_links
[object]
A list of custom links.
is_hidden
boolean
The flag for toggling context menu link visibility.
label
string
The label for the custom link URL. Keep the label short and descriptive. Use metrics and tags as variables.
link
string
The URL of the custom link. URL must include http or https. A relative URL must start with /.
override_label
string
The label ID that refers to a context menu link. Can be logs, hosts, traces, profiles, processes, containers, or rum.
description
string
The description of the widget.
requests [required]
[object]
Array of request objects to display in the widget. May include an optional request for the region layer and/or an optional request for the points layer. Region layer requests must contain a group-by tag whose value is a country ISO code.
See the Request JSON schema documentation
for information about building the REQUEST_SCHEMA.
columns
[object]
Widget columns.
field [required]
string
Widget column field.
width [required]
enum
Widget column width.
Allowed enum values: auto,compact,full
conditional_formats
[object]
Threshold (numeric) conditional formatting rules may be used by a regions layer.
comparator [required]
enum
Comparator to apply.
Allowed enum values: =,>,>=,<,<=
custom_bg_color
string
Color palette to apply to the background, same values available as palette.
custom_fg_color
string
Color palette to apply to the foreground, same values available as palette.
hide_value
boolean
True hides values.
image_url
string
Displays an image as the background.
metric
string
Metric from the request to correlate this conditional format with.
palette [required]
enum
Color palette to apply.
Allowed enum values: blue,custom_bg,custom_image,custom_text,gray_on_white,grey,green,orange,red,red_on_white
timeframe
string
Defines the displayed timeframe.
value [required]
double
Value for the comparator.
formulas
[object]
List of formulas that operate on queries.
alias
string
Expression alias.
cell_display_mode
enum
Define a display mode for the table cell.
Allowed enum values: number,bar,trend
cell_display_mode_options
object
Cell display mode options for the widget formula. (only if cell_display_mode is set to trend).
trend_type
enum
Trend type for the cell display mode options.
Allowed enum values: area,line,bars
y_scale
enum
Y scale for the cell display mode options.
Allowed enum values: shared,independent
conditional_formats
[object]
List of conditional formats.
comparator [required]
enum
Comparator to apply.
Allowed enum values: =,>,>=,<,<=
custom_bg_color
string
Color palette to apply to the background, same values available as palette.
custom_fg_color
string
Color palette to apply to the foreground, same values available as palette.
hide_value
boolean
True hides values.
image_url
string
Displays an image as the background.
metric
string
Metric from the request to correlate this conditional format with.
palette [required]
enum
Color palette to apply.
Allowed enum values: blue,custom_bg,custom_image,custom_text,gray_on_white,grey,green,orange,red,red_on_white
timeframe
string
Defines the displayed timeframe.
value [required]
double
Value for the comparator.
formula [required]
string
String expression built from queries, formulas, and functions.
limit
object
Options for limiting results returned.
count
int64
Number of results to return.
order
enum
Direction of sort.
Allowed enum values: asc,desc
default: desc
number_format
object
Number format options for the widget.
unit
<oneOf>
Number format unit.
Option 1
object
Canonical unit.
per_unit_name
string
The name of the unit per item.
type
enum
The type of unit scale.
Allowed enum values: canonical_unit
unit_name
string
The name of the unit.
Option 2
object
Custom unit.
label
string
The label for the custom unit.
type
enum
The type of custom unit.
Allowed enum values: custom_unit_label
unit_scale
object
The definition of NumberFormatUnitScale object.
type
enum
The type of unit scale.
Allowed enum values: canonical_unit
unit_name
string
The name of the unit.
style
object
Styling options for widget formulas.
palette
string
The color palette used to display the formula. A guide to the available color palettes can be found at https://docs.datadoghq.com/dashboards/guide/widget_colors
palette_index
int64
Index specifying which color to use within the palette.
log_query
object
DEPRECATED: Deprecated - Use queries and formulas instead.
compute
object
Define computation for a log query.
aggregation [required]
string
The aggregation method.
facet
string
Facet name.
interval
int64
Define a time interval in seconds.
group_by
[object]
List of tag prefixes to group by in the case of a cluster check.
facet [required]
string
Facet name.
limit
int64
Maximum number of items in the group.
sort
object
Define a sorting method.
aggregation [required]
string
The aggregation method.
facet
string
Facet name.
order [required]
enum
Widget sorting methods.
Allowed enum values: asc,desc
index
string
A coma separated-list of index names. Use "*" query all indexes at once. Multiple Indexes
multi_compute
[object]
This field is mutually exclusive with compute.
aggregation [required]
string
The aggregation method.
facet
string
Facet name.
interval
int64
Define a time interval in seconds.
search
object
The query being made on the logs.
query [required]
string
Search value to apply.
q
string
DEPRECATED: The widget metrics query. Deprecated - Use queries and formulas instead.
queries
[ <oneOf>]
List of queries that can be returned directly or used in formulas.
Option 1
object
A formula and functions metrics query.
aggregator
enum
The aggregation methods available for metrics queries.
Allowed enum values: avg,min,max,sum,last,area,l2norm,percentile
cross_org_uuids
[string]
The source organization UUID for cross organization queries. Feature in Private Beta.
data_source [required]
enum
Data source for metrics queries.
Allowed enum values: metrics
name [required]
string
Name of the query for use in formulas.
query [required]
string
Metrics query definition.
semantic_mode
enum
Semantic mode for metrics queries. This determines how metrics from different sources are combined or displayed.
Allowed enum values: combined,native
Option 2
object
A formula and functions events query.
compute [required]
object
Compute options.
aggregation [required]
enum
Aggregation methods for event platform queries.
Allowed enum values: count,cardinality,median,pc75,pc90,pc95,pc98,pc99,sum,min
interval
int64
A time interval in milliseconds.
metric
string
Measurable attribute to compute.
cross_org_uuids
[string]
The source organization UUID for cross organization queries. Feature in Private Beta.
data_source [required]
enum
Data source for event platform-based queries.
Allowed enum values: logs,spans,network,rum,security_signals,profiles,audit,events,ci_tests,ci_pipelines
group_by
<oneOf>
Group by configuration for a formula and functions events query. Accepts either a list of facet objects or a flat object that specifies a list of facet fields.
Option 1
[object]
List of objects used to group by.
facet [required]
string
Event facet.
limit
int64
Number of groups to return.
sort
object
Options for sorting group by results.
aggregation [required]
enum
Aggregation methods for event platform queries.
Allowed enum values: count,cardinality,median,pc75,pc90,pc95,pc98,pc99,sum,min
metric
string
Metric used for sorting group by results.
order
enum
Direction of sort.
Allowed enum values: asc,desc
default: desc
Option 2
object
Flat group by configuration using multiple event facet fields.
fields [required]
[string]
List of event facets to group by.
limit
int64
Number of groups to return.
sort
object
Options for sorting group by results.
aggregation [required]
enum
Aggregation methods for event platform queries.
Allowed enum values: count,cardinality,median,pc75,pc90,pc95,pc98,pc99,sum,min
metric
string
Metric used for sorting group by results.
order
enum
Direction of sort.
Allowed enum values: asc,desc
default: desc
indexes
[string]
An array of index names to query in the stream. Omit or use [] to query all indexes at once.
name [required]
string
Name of the query for use in formulas.
search
object
Search options.
query [required]
string
Events search string.
storage
string
Option for storage location. Feature in Private Beta.
Option 3
object
Process query using formulas and functions.
aggregator
enum
The aggregation methods available for metrics queries.
Allowed enum values: avg,min,max,sum,last,area,l2norm,percentile
cross_org_uuids
[string]
The source organization UUID for cross organization queries. Feature in Private Beta.
data_source [required]
enum
Data sources that rely on the process backend.
Allowed enum values: process,container
is_normalized_cpu
boolean
Whether to normalize the CPU percentages.
limit
int64
Number of hits to return.
metric [required]
string
Process metric name.
name [required]
string
Name of query for use in formulas.
sort
enum
Direction of sort.
Allowed enum values: asc,desc
default: desc
tag_filters
[string]
An array of tags to filter by.
text_filter
string
Text to use as filter.
Option 4
object
A formula and functions APM dependency stats query.
cross_org_uuids
[string]
The source organization UUID for cross organization queries. Feature in Private Beta.
data_source [required]
enum
Data source for APM dependency stats queries.
Allowed enum values: apm_dependency_stats
env [required]
string
APM environment.
is_upstream
boolean
Determines whether stats for upstream or downstream dependencies should be queried.
name [required]
string
Name of query to use in formulas.
operation_name [required]
string
Name of operation on service.
primary_tag_name
string
The name of the second primary tag used within APM; required when primary_tag_value is specified. See https://docs.datadoghq.com/tracing/guide/setting_primary_tags_to_scope/#add-a-second-primary-tag-in-datadog.
primary_tag_value
string
Filter APM data by the second primary tag. primary_tag_name must also be specified.
resource_name [required]
string
APM resource.
service [required]
string
APM service.
stat [required]
enum
APM statistic.
Allowed enum values: avg_duration,avg_root_duration,avg_spans_per_trace,error_rate,pct_exec_time,pct_of_traces,total_traces_count
Option 5
object
DEPRECATED: APM resource stats query using formulas and functions. Deprecated - Use apm_metrics query type instead.
cross_org_uuids
[string]
The source organization UUID for cross organization queries. Feature in Private Beta.
data_source [required]
enum
Data source for APM resource stats queries.
Allowed enum values: apm_resource_stats
env [required]
string
APM environment.
group_by
[string]
Array of fields to group results by.
name [required]
string
Name of this query to use in formulas.
operation_name
string
Name of operation on service.
primary_tag_name
string
Name of the second primary tag used within APM. Required when primary_tag_value is specified. See https://docs.datadoghq.com/tracing/guide/setting_primary_tags_to_scope/#add-a-second-primary-tag-in-datadog
primary_tag_value
string
Value of the second primary tag by which to filter APM data. primary_tag_name must also be specified.
resource_name
string
APM resource name.
service [required]
string
APM service name.
stat [required]
enum
APM resource stat name.
Allowed enum values: errors,error_rate,hits,latency_avg,latency_distribution,latency_max,latency_p50,latency_p75,latency_p90,latency_p95
Option 6
object
A formula and functions APM metrics query.
data_source [required]
enum
Data source for APM metrics queries.
Allowed enum values: apm_metrics
group_by
[string]
Optional fields to group the query results by.
name [required]
string
Name of this query to use in formulas.
operation_mode
string
Optional operation mode to aggregate across operation names.
operation_name
string
Name of operation on service. If not provided, the primary operation name is used.
peer_tags
[string]
Tags to query for a specific downstream entity (peer.service, peer.db_instance, peer.s3, peer.s3.bucket, etc.).
query_filter
string
Additional filters for the query using metrics query syntax (e.g., env, primary_tag).
resource_hash
string
The hash of a specific resource to filter by.
resource_name
string
The full name of a specific resource to filter by.
service
string
APM service name.
span_kind
enum
Describes the relationship between the span, its parents, and its children in a trace.
Allowed enum values: consumer,server,client,producer,internal
stat [required]
enum
APM metric stat name.
Allowed enum values: errors,error_rate,errors_per_second,latency_avg,latency_max,latency_p50,latency_p75,latency_p90,latency_p95,latency_p99
Option 7
object
A formula and functions metrics query.
additional_query_filters
string
Additional filters applied to the SLO query.
cross_org_uuids
[string]
The source organization UUID for cross organization queries. Feature in Private Beta.
data_source [required]
enum
Data source for SLO measures queries.
Allowed enum values: slo
group_mode
enum
Group mode to query measures.
Allowed enum values: overall,components
measure [required]
enum
SLO measures queries.
Allowed enum values: good_events,bad_events,good_minutes,bad_minutes,slo_status,error_budget_remaining,burn_rate,error_budget_burndown
name
string
Name of the query for use in formulas.
slo_id [required]
string
ID of an SLO to query measures.
slo_query_type
enum
Name of the query for use in formulas.
Allowed enum values: metric,monitor,time_slice
Option 8
object
A formula and functions Cloud Cost query.
aggregator
enum
Aggregator used for the request.
Allowed enum values: avg,last,max,min,sum,percentile
cross_org_uuids
[string]
The source organization UUID for cross organization queries. Feature in Private Beta.
data_source [required]
enum
Data source for Cloud Cost queries.
Allowed enum values: cloud_cost
name [required]
string
Name of the query for use in formulas.
query [required]
string
Query for Cloud Cost data.
Option 9
object
A formula and functions Product Analytics Extended query for advanced analytics features.
audience_filters
object
Product Analytics/RUM audience filters.
accounts
[object]
name
string
The name of the account subquery.
query
string
The query string for the account subquery.
filter_condition
string
An optional filter condition applied to the audience subquery.
segments
[object]
name
string
The name of the segment subquery.
segment_id
string
The unique identifier of the segment.
users
[object]
name
string
The name of the user subquery.
query
string
The query string for the user subquery.
compute [required]
object
Compute configuration for Product Analytics Extended queries.
aggregation [required]
enum
Aggregation methods for event platform queries.
Allowed enum values: count,cardinality,median,pc75,pc90,pc95,pc98,pc99,sum,min
interval
double
Fixed-width time bucket interval in milliseconds for time series queries. Mutually exclusive with rollup.
metric
string
Measurable attribute to compute.
name
string
Name of the compute for use in formulas.
rollup
object
Calendar-aligned time bucket for time series queries (for example, day, week, or month boundaries). Mutually exclusive with interval.
alignment
string
Alignment of the interval. Valid values depend on the interval type. For day, use hours (for example, 1am, 2pm, or 14). For week, use day names (for example, monday). For month, use day-of-month ordinals (for example, 1st, 15th). For year or quarter, use month names (for example, january).
quantity
int64
Quantity of the interval.
timezone
string
Timezone for the interval.
type [required]
enum
Type of calendar interval.
Allowed enum values: day,week,month,year,quarter,minute,hour
data_source [required]
enum
Data source for Product Analytics Extended queries.
Allowed enum values: product_analytics_extended
group_by
[object]
Group by configuration.
facet [required]
string
Facet name to group by.
limit
int32
Maximum number of groups to return.
should_exclude_missing
boolean
Whether to exclude events missing the group-by facet.
sort
object
Options for sorting group by results.
aggregation [required]
enum
Aggregation methods for event platform queries.
Allowed enum values: count,cardinality,median,pc75,pc90,pc95,pc98,pc99,sum,min
metric
string
Metric used for sorting group by results.
order
enum
Direction of sort.
Allowed enum values: asc,desc
default: desc
indexes
[string]
Event indexes to query.
name [required]
string
Name of the query for use in formulas.
query [required]
object
Base query for Product Analytics.
data_source [required]
enum
Data source for Product Analytics event queries.
Allowed enum values: product_analytics
search [required]
object
Search configuration for Product Analytics event query.
query [required]
string
RUM event search query used to filter views or actions.
Option 10
object
A formula and functions User Journey query for defining funnel, timeseries, and scalar visualizations over journey data.
compute [required]
object
Compute configuration for User Journey formula queries.
aggregation [required]
enum
Aggregation methods for event platform queries.
Allowed enum values: count,cardinality,median,pc75,pc90,pc95,pc98,pc99,sum,min
interval
double
Time bucket interval in milliseconds for time series queries.
metric
enum
Metric for User Journey formula compute. __dd.conversion and __dd.conversion_rate accept count and cardinality as aggregations. __dd.time_to_convert accepts avg, median, pc75, pc95, pc98, pc99, min, and max.
Allowed enum values: __dd.conversion,__dd.conversion_rate,__dd.time_to_convert
target
object
Target for user journey search.
end
string
End value.
start
string
Start value.
type [required]
string
Target type.
value
string
Target value.
data_source [required]
enum
Data source for user journey funnel queries.
Allowed enum values: product_analytics_journey
group_by
[object]
Group by configuration.
facet [required]
string
Facet name to group by.
limit
int32
Maximum number of groups to return.
should_exclude_missing
boolean
Whether to exclude events missing the group-by facet.
sort
object
Options for sorting group by results.
aggregation [required]
enum
Aggregation methods for event platform queries.
Allowed enum values: count,cardinality,median,pc75,pc90,pc95,pc98,pc99,sum,min
metric
string
Metric used for sorting group by results.
order
enum
Direction of sort.
Allowed enum values: asc,desc
default: desc
target
object
Target for user journey search.
end
string
End value.
start
string
Start value.
type [required]
string
Target type.
value
string
Target value.
name [required]
string
Name of the query for use in formulas.
search [required]
object
User journey search configuration.
expression [required]
string
Expression string.
filters
object
Filters for user journey search.
audience_filters
object
Product Analytics/RUM audience filters.
accounts
[object]
name
string
The name of the account subquery.
query
string
The query string for the account subquery.
filter_condition
string
An optional filter condition applied to the audience subquery.
segments
[object]
name
string
The name of the segment subquery.
segment_id
string
The unique identifier of the segment.
users
[object]
name
string
The name of the user subquery.
query
string
The query string for the user subquery.
graph_filters
[object]
Graph filters.
name
string
Filter name.
operator
string
Filter operator.
target
object
Target for user journey search.
end
string
End value.
start
string
Start value.
type [required]
string
Target type.
value
string
Target value.
value
int64
Filter value.
string_filter
string
String filter.
join_keys
object
Join keys for user journey queries.
primary [required]
string
Primary join key.
secondary
[string]
Secondary join keys.
node_objects [required]
object
Node objects mapping.
<any-key>
object
Base query for Product Analytics.
data_source [required]
enum
Data source for Product Analytics event queries.
Allowed enum values: product_analytics
search [required]
object
Search configuration for Product Analytics event query.
query [required]
string
RUM event search query used to filter views or actions.
step_aliases
object
Step aliases mapping.
<any-key>
string
Option 11
object
A formula and functions Retention query for defining timeseries and scalar visualizations.
compute [required]
object
Compute configuration for retention queries.
aggregation [required]
<oneOf>
The type of aggregation that can be performed on events-based queries.
Option 1
enum
Standard aggregation types for events-based queries.
Allowed enum values: avg,cardinality,count,delta,earliest,latest,max,median,min,most_frequent
Option 2
string
Percentile aggregation.
metric [required]
enum
Metric for retention compute.
Allowed enum values: __dd.retention,__dd.retention_rate
data_source [required]
enum
Data source for retention queries.
Allowed enum values: product_analytics_retention
group_by
[object]
Group by configuration.
facet [required]
string
Facet to group by.
limit
int64
Maximum number of groups.
should_exclude_missing
boolean
Whether to exclude missing values.
sort
object
Sort configuration for retention group by.
order
enum
Widget sorting methods.
Allowed enum values: asc,desc
source
string
Source field.
target [required]
enum
Target for retention group by.
Allowed enum values: cohort,return_period
name [required]
string
Name of the query for use in formulas.
search [required]
object
Search configuration for retention queries.
cohort_criteria [required]
object
Cohort criteria for retention queries.
base_query [required]
object
Base query for Product Analytics.
data_source [required]
enum
Data source for Product Analytics event queries.
Allowed enum values: product_analytics
search [required]
object
Search configuration for Product Analytics event query.
query [required]
string
RUM event search query used to filter views or actions.
time_interval [required]
object
Time interval for cohort criteria.
type [required]
enum
Type of time interval for cohort criteria.
Allowed enum values: calendar
value [required]
object
Calendar interval definition.
alignment
string
Alignment of the interval. Valid values depend on the interval type. For day, use hours (for example, 1am, 2pm, or 14). For week, use day names (for example, monday). For month, use day-of-month ordinals (for example, 1st, 15th). For year or quarter, use month names (for example, january).
quantity
int64
Quantity of the interval.
timezone
string
Timezone for the interval.
type [required]
enum
Type of calendar interval.
Allowed enum values: day,week,month,year,quarter,minute,hour
filters
object
Filters for retention queries.
audience_filters
object
Product Analytics/RUM audience filters.
accounts
[object]
name
string
The name of the account subquery.
query
string
The query string for the account subquery.
filter_condition
string
An optional filter condition applied to the audience subquery.
segments
[object]
name
string
The name of the segment subquery.
segment_id
string
The unique identifier of the segment.
users
[object]
name
string
The name of the user subquery.
query
string
The query string for the user subquery.
string_filter
string
String filter.
retention_entity [required]
enum
Entity to track for retention.
Allowed enum values: @usr.id,@account.id
return_condition [required]
enum
Condition for counting user return.
Allowed enum values: conversion_on,conversion_on_or_after
return_criteria
object
Return criteria for retention queries.
base_query [required]
object
Base query for Product Analytics.
data_source [required]
enum
Data source for Product Analytics event queries.
Allowed enum values: product_analytics
search [required]
object
Search configuration for Product Analytics event query.
query [required]
string
RUM event search query used to filter views or actions.
time_interval
object
Time interval for return criteria.
type [required]
enum
Type of time interval for return criteria.
Allowed enum values: fixed
unit [required]
enum
Unit of time for retention return criteria interval.
Allowed enum values: day,week,month
value [required]
double
Value of the time interval.
query
object
Updated list stream widget.
assignee_uuids
[string]
Filter by assignee UUIDs. Usable only with issue_stream.
clustering_pattern_field_path
string
Specifies the field for logs pattern clustering. Usable only with logs_pattern_stream.
compute
[object]
Compute configuration for the List Stream Widget. Compute can be used only with the logs_transaction_stream (from 1 to 5 items) list stream source.
aggregation [required]
enum
Aggregation value.
Allowed enum values: count,cardinality,median,pc75,pc90,pc95,pc98,pc99,sum,min
facet
string
Facet name.
data_source [required]
enum
Source from which to query items to display in the stream. apm_issue_stream, rum_issue_stream, and logs_issue_stream are deprecated. Use issue_stream instead.
Allowed enum values: logs_stream,audit_stream,ci_pipeline_stream,ci_test_stream,rum_issue_stream,apm_issue_stream,trace_stream,logs_issue_stream,logs_pattern_stream,logs_transaction_stream
default: logs_stream
event_size
enum
Size to use to display an event.
Allowed enum values: s,l
group_by
[object]
Group by configuration for the List Stream Widget. Group by can be used only with logs_pattern_stream (up to 4 items) or logs_transaction_stream (one group by item is required) list stream source.
facet [required]
string
Facet name.
indexes
[string]
List of indexes.
persona
enum
Persona filter for the issue_stream data source.
Allowed enum values: all,browser,mobile,backend
query_string [required]
string
Widget query.
sort
object
Which column and order to sort by
column [required]
string
Facet path for the column
order [required]
enum
Widget sorting methods.
Allowed enum values: asc,desc
states
[string]
Filter by issue states. Usable only with issue_stream.
storage
string
Option for storage location. Feature in Private Beta.
suspected_causes
[string]
Filter by suspected causes. Usable only with issue_stream.
team_handles
[string]
Filter by team handles. Usable only with issue_stream.
response_format
enum
Timeseries, scalar, or event list response. Event list response formats are supported by Geomap widgets.
Allowed enum values: timeseries,scalar,event_list
rum_query
object
DEPRECATED: Deprecated - Use queries and formulas instead.
compute
object
Define computation for a log query.
aggregation [required]
string
The aggregation method.
facet
string
Facet name.
interval
int64
Define a time interval in seconds.
group_by
[object]
List of tag prefixes to group by in the case of a cluster check.
facet [required]
string
Facet name.
limit
int64
Maximum number of items in the group.
sort
object
Define a sorting method.
aggregation [required]
string
The aggregation method.
facet
string
Facet name.
order [required]
enum
Widget sorting methods.
Allowed enum values: asc,desc
index
string
A coma separated-list of index names. Use "*" query all indexes at once. Multiple Indexes
multi_compute
[object]
This field is mutually exclusive with compute.
aggregation [required]
string
The aggregation method.
facet
string
Facet name.
interval
int64
Define a time interval in seconds.
search
object
The query being made on the logs.
query [required]
string
Search value to apply.
security_query
object
DEPRECATED: Deprecated - Use queries and formulas instead.
compute
object
Define computation for a log query.
aggregation [required]
string
The aggregation method.
facet
string
Facet name.
interval
int64
Define a time interval in seconds.
group_by
[object]
List of tag prefixes to group by in the case of a cluster check.
facet [required]
string
Facet name.
limit
int64
Maximum number of items in the group.
sort
object
Define a sorting method.
aggregation [required]
string
The aggregation method.
facet
string
Facet name.
order [required]
enum
Widget sorting methods.
Allowed enum values: asc,desc
index
string
A coma separated-list of index names. Use "*" query all indexes at once. Multiple Indexes
multi_compute
[object]
This field is mutually exclusive with compute.
aggregation [required]
string
The aggregation method.
facet
string
Facet name.
interval
int64
Define a time interval in seconds.
search
object
The query being made on the logs.
query [required]
string
Search value to apply.
sort
object
The controls for sorting the widget.
count
int64
The number of items to limit the widget to.
order_by
[ <oneOf>]
The array of items to sort the widget by in order.
Option 1
object
The formula to sort the widget by.
index [required]
int64
The index of the formula to sort by.
order [required]
enum
Widget sorting methods.
Allowed enum values: asc,desc
type [required]
enum
Set the sort type to formula.
Allowed enum values: formula
Option 2
object
The group to sort the widget by.
name [required]
string
The name of the group.
order [required]
enum
Widget sorting methods.
Allowed enum values: asc,desc
type [required]
enum
Set the sort type to group.
Allowed enum values: group
style
object
The style to apply to the request for points layer.
color_by
string
The category to color the points by.
text_formats
[object]
Text formatting rules may be used by a points layer.
custom_bg_color
string
Hex representation of the custom background color. Used with custom background palette option.
custom_fg_color
string
Hex representation of the custom text color. Used with custom text palette option.
match [required]
object
Match rule for the table widget text format.
type [required]
enum
Match or compare option.
Allowed enum values: is,is_not,contains,does_not_contain,starts_with,ends_with
value [required]
string
Table Widget Match String.
palette
enum
Color-on-color palette to highlight replaced text.
Allowed enum values: white_on_red,white_on_yellow,white_on_green,black_on_light_red,black_on_light_yellow,black_on_light_green,red_on_white,yellow_on_white,green_on_white,custom_bg
default: white_on_green
replace
<oneOf>
Replace rule for the table widget text format.
Option 1
object
Match All definition.
type [required]
enum
Table widget text format replace all type.
Allowed enum values: all
with [required]
string
Replace All type.
Option 2
object
Match Sub-string definition.
substring [required]
string
Text that will be replaced.
type [required]
enum
Table widget text format replace sub-string type.
Allowed enum values: substring
with [required]
string
Text that will replace original sub-string.
style [required]
object
The style to apply to the widget.
palette [required]
string
The color palette to apply to the widget.
palette_flip [required]
boolean
Whether to flip the palette tones.
time
<oneOf>
Time setting for the widget.
Option 1
object
Wrapper for live span
hide_incomplete_cost_data
boolean
Whether to hide incomplete cost data in the widget.
live_span
enum
The available timeframes depend on the widget you are using.
Allowed enum values: 1m,5m,10m,15m,30m,1h,4h,1d,2d,1w
Option 2
object
Used for arbitrary live span times, such as 17 minutes or 6 hours.
hide_incomplete_cost_data
boolean
Whether to hide incomplete cost data in the widget.
type [required]
enum
Type "live" denotes a live span in the new format.
Allowed enum values: live
unit [required]
enum
Unit of the time span.
Allowed enum values: minute,hour,day,week,month,year
value [required]
int64
Value of the time span.
Option 3
object
Used for fixed span times, such as 'March 1 to March 7'.
from [required]
int64
Start time in milliseconds since epoch.
hide_incomplete_cost_data
boolean
Whether to hide incomplete cost data in the widget.
to [required]
int64
End time in milliseconds since epoch.
type [required]
enum
Type "fixed" denotes a fixed span.
Allowed enum values: fixed
title
string
The title of your widget.
title_align
enum
How to align the text on the widget.
Allowed enum values: center,left,right
title_size
string
The size of the title.
type [required]
enum
Type of the geomap widget.
Allowed enum values: geomap
default: geomap
view [required]
object
The view of the world that the map should render.
focus [required]
string
The 2-letter ISO code of a country to focus the map on, or WORLD for global view, or a region (EMEA, APAC, LATAM), or a continent (NORTH_AMERICA, SOUTH_AMERICA, EUROPE, AFRICA, ASIA, OCEANIA).
{
"custom_links": [
{
"is_hidden": false,
"label": "Search logs for {{host}}",
"link": "https://app.datadoghq.com/logs?query={{host}}",
"override_label": "logs"
}
],
"description": "string",
"requests": [
{
"columns": [
{
"field": "content",
"width": "compact"
}
],
"conditional_formats": [
{
"comparator": ">",
"custom_bg_color": "string",
"custom_fg_color": "string",
"hide_value": false,
"image_url": "string",
"metric": "string",
"palette": "blue",
"timeframe": "string",
"value": 0
}
],
"formulas": [
{
"alias": "string",
"cell_display_mode": "number",
"cell_display_mode_options": {
"trend_type": "area",
"y_scale": "shared"
},
"conditional_formats": [
{
"comparator": ">",
"custom_bg_color": "string",
"custom_fg_color": "string",
"hide_value": false,
"image_url": "string",
"metric": "string",
"palette": "blue",
"timeframe": "string",
"value": 0
}
],
"formula": "func(a) + b",
"limit": {
"count": "integer",
"order": "string"
},
"number_format": {
"unit": {
"per_unit_name": "bytes",
"type": "canonical_unit",
"unit_name": "bytes"
},
"unit_scale": {
"type": "canonical_unit",
"unit_name": "bytes"
}
},
"style": {
"palette": "classic",
"palette_index": 1
}
}
],
"log_query": {
"compute": {
"aggregation": "avg",
"facet": "@duration",
"interval": 5000
},
"group_by": [
{
"facet": "resource_name",
"limit": 50,
"sort": {
"aggregation": "avg",
"facet": "@string_query.interval",
"order": "desc"
}
}
],
"index": "days-3,days-7",
"multi_compute": [
{
"aggregation": "avg",
"facet": "@duration",
"interval": 5000
}
],
"search": {
"query": ""
}
},
"q": "string",
"queries": [],
"query": {
"assignee_uuids": [],
"clustering_pattern_field_path": "message",
"compute": [
{
"aggregation": "count",
"facet": "resource_name"
}
],
"data_source": "logs_stream",
"event_size": "string",
"group_by": [
{
"facet": "resource_name"
}
],
"indexes": [],
"persona": "string",
"query_string": "@service:app",
"sort": {
"column": "",
"order": "desc"
},
"states": [],
"storage": "indexes",
"suspected_causes": [],
"team_handles": []
},
"response_format": "timeseries",
"rum_query": {
"compute": {
"aggregation": "avg",
"facet": "@duration",
"interval": 5000
},
"group_by": [
{
"facet": "resource_name",
"limit": 50,
"sort": {
"aggregation": "avg",
"facet": "@string_query.interval",
"order": "desc"
}
}
],
"index": "days-3,days-7",
"multi_compute": [
{
"aggregation": "avg",
"facet": "@duration",
"interval": 5000
}
],
"search": {
"query": ""
}
},
"security_query": {
"compute": {
"aggregation": "avg",
"facet": "@duration",
"interval": 5000
},
"group_by": [
{
"facet": "resource_name",
"limit": 50,
"sort": {
"aggregation": "avg",
"facet": "@string_query.interval",
"order": "desc"
}
}
],
"index": "days-3,days-7",
"multi_compute": [
{
"aggregation": "avg",
"facet": "@duration",
"interval": 5000
}
],
"search": {
"query": ""
}
},
"sort": {
"count": "integer",
"order_by": [
{
"index": 0,
"order": "desc",
"type": "formula"
}
]
},
"style": {
"color_by": "status"
},
"text_formats": [
{
"custom_bg_color": "#632ca6",
"custom_fg_color": "#632ca6",
"match": {
"type": "is",
"value": "Match Value"
},
"palette": "string",
"replace": {
"type": "all",
"with": "all"
}
}
]
}
],
"style": {
"palette": "hostmap_blues",
"palette_flip": false
},
"time": {
"hide_incomplete_cost_data": false,
"live_span": "5m"
},
"title": "string",
"title_align": "string",
"title_size": "string",
"type": "geomap",
"view": {
"focus": "WORLD"
}
}Additional helpful documentation, links, and articles:
| |