FAQ: File Locations for Key Humio Data

Last Updated: 2022-03-11

  • Dashboards are stored in the global-data-snapshot.json file within the base data director configured for your deployment. They are stored witin the file as JSON objects, you can look for them by taking the ID at the end of the dashboard URL and look for it in the global file. The JSON object contains all the details to build the dashboards (the widgets and their size and position, the queries to be run for each widget).

  • Alerts are also stored in the global-data-snapshot.json file. You can look for them in the same way you do for dashboards, by using their ID. Every alert is related to a "notifier" ID, it identifies the action. The action is described as another JSON object and it includes for instance the query that you're using for the alert, the webhook to be used...

  • Files are stored on disk used for your Humio installation under the Humio data directory.

    Files are stored in directories and subdirectories with the following structure:

    graph TD humio["Humio Data Directory"] --> dataspace1["Dataspace Directory"] humio --> dataspace1["Dataspace Directory"] humio --> dataspace2["Dataspace Directory"] humio --> dataspace3["Dataspace Directory"] dataspace1 --> datasource1["Datasource Directory"] dataspace1 --> datasource2["Datasource Directory"] datasource2 --> files["Files"]

    You can double-check the whole hierarchy by running the following query in the GraphiQL UI using the query:

    query {
     repositories {
     name
     id
     datasources {
     name
     }
     }
     }

    The following output is from a fresh installation of Humio:

    {
     "data": {
     "repositories": [
     {
     "name": "humio-metrics",
     "id": "t238gTzyxf5LQuFw839YkDhI",
     "datasources": [
     {
     "name": "v2pmxcQzlkeX0QsPMnyHuHU8"
     }
     ]
     },
     {
     "name": "humio-audit",
     "id": "TvIGCQx3EdPMLmfuxFrkVDcb",
     "datasources": [
     {
     "name": "CQqJZSmjwjSyTnnRqWQmw8ip"
     },
     {
     "name": "mXADO52f2Jyavu5h8Y4hp4cv"
     }
     ]
     },
     {
     "name": "humio-measurements",
     "id": "NIEQ9hQUVcSeocbDBAMbFsrz",
     "datasources": []
     },
     {
     "name": "humio",
     "id": "fmmTRc6VXlwofpJiQMOAANNU",
     "datasources": [
     {
     "name": "34VNGTT3RpekYRbs9UStnSzG"
     },
     {
     "name": "di5ZK1p6t04zy8mVWSnk6g6p"
     },
     {
     "name": "OExMfDv3S3dCTHPA0uh7LxJn"
     },
     {
     "name": "Nfeqb0ZVzwgdQ6tmvSM0KQeA"
     },
     {
     "name": "2I1cPE3BaKo64kJzpoYFNXnu"
     }
     ]
     },
     {
     "name": "humio-usage",
     "id": "e5KTBpGi52D39RGGThxJEAWV",
     "datasources": [
     {
     "name": "kLczJnMBubRYdbXJUxaykvaZ"
     },
     {
     "name": "pf4kc8ekpfH6Pn0wKhFbTN7a"
     }
     ]
     },
     {
     "name": "sandbox_LUl2uHuS9uyr66u8hRBDVvkA",
     "id": "sandbox_LUl2uHuS9uyr66u8hRBDVvkA",
     "datasources": []
     }
     ]
     }
     }