🎯API Stability
Long-TermThis API is stable and will remain supported across versions with minimal breaking changes.

Summary

The removeStarFromField() mutation removes a star from a field in a LogScale repository or view. Starring a field highlights it in the search interface, making it easier to identify during analysis. Use this mutation to unstar a field you no longer want to emphasize.

Syntax

graphql
removeStarFromField(
      input: RemoveStarToFieldInput!
   ): RemoveStarToFieldMutation!

Provide the search domain name and field name through the input argument. The mutation returns a non-null RemoveStarToFieldMutation object containing the updated list of starred fields. See the Input Parameters and Returned Values sections for details.

To retrieve the currently starred fields before removing one, select Show Starred Fields Query.

Hide Query Example

Show Starred Fields Query

Example

Raw
graphql
mutation {
  removeStarFromField(input: 
       { fieldName: "connectionSource"
         searchDomainName: "humio" } )
  { starredFields }
}
Mac OS or Linux (curl)
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "mutation {
  removeStarFromField(input: 
       { fieldName: \"connectionSource\"
         searchDomainName: \"humio\" } )
  { starredFields }
}"
}
EOF
Mac OS or Linux (curl) One-line
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "mutation {
  removeStarFromField(input: 
       { fieldName: \"connectionSource\"
         searchDomainName: \"humio\" } )
  { starredFields }
}"
}
EOF
Windows Cmd and curl
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql ^
    -H "Authorization: Bearer $TOKEN" ^
    -H "Content-Type: application/json" ^
    -d @'{"query" : "mutation { ^
  removeStarFromField(input:  ^
       { fieldName: \"connectionSource\" ^
         searchDomainName: \"humio\" } ) ^
  { starredFields } ^
}" ^
} '
Windows Powershell and curl
powershell
curl.exe -X POST 
    -H "Authorization: Bearer $TOKEN"
    -H "Content-Type: application/json"
    -d '{"query" : "mutation {
  removeStarFromField(input: 
       { fieldName: \"connectionSource\"
         searchDomainName: \"humio\" } )
  { starredFields }
}"
}'
    "$YOUR_LOGSCALE_URL/graphql"
Perl
perl
#!/usr/bin/perl

use HTTP::Request;
use LWP;

my $TOKEN = "TOKEN";

my $uri = '$YOUR_LOGSCALE_URL/graphql';

my $query = "mutation {
  removeStarFromField(input: 
       { fieldName: \"connectionSource\"
         searchDomainName: \"humio\" } )
  { starredFields }
}";
$query =~ s/\n/ /g;
my $json = sprintf('{"query" : "%s"}',$query);
my $req = HTTP::Request->new("POST", $uri );

$req->header("Authorization" => "Bearer $TOKEN");
$req->header("Content-Type" => "application/json");

$req->content( $json );

my $lwp = LWP::UserAgent->new;

my $result = $lwp->request( $req );

print $result->{"_content"},"\n";
Python
python
#! /usr/local/bin/python3

import requests

url = '$YOUR_LOGSCALE_URL/graphql'
mydata = r'''{"query" : "mutation {
  removeStarFromField(input: 
       { fieldName: \"connectionSource\"
         searchDomainName: \"humio\" } )
  { starredFields }
}"
}'''

resp = requests.post(url,
                     data = mydata,
                     headers = {
   "Authorization" : "Bearer $TOKEN",
   "Content-Type" : "application/json"
}
)

print(resp.text)
Node.js
javascript
const https = require('https');

const data = JSON.stringify(
    {"query" : "mutation {
  removeStarFromField(input: 
       { fieldName: \"connectionSource\"
         searchDomainName: \"humio\" } )
  { starredFields }
}"
}
);


const options = {
  hostname: '$YOUR_LOGSCALE_URL',
  path: 'graphql',
  port: 443,
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Content-Length': data.length,
    Authorization: 'BEARER ' + process.env.TOKEN,
    'User-Agent': 'Node',
  },
};

const req = https.request(options, (res) => {
  let data = '';
  console.log(`statusCode: ${res.statusCode}`);

  res.on('data', (d) => {
    data += d;
  });
  res.on('end', () => {
    console.log(JSON.parse(data).data);
  });
});

req.on('error', (error) => {
  console.error(error);
});

req.write(data);
req.end();
Example Responses
Success (HTTP Response Code 200 OK)
json
{
  "data": {
    "removeStarFromField": {
      "starredFields": [
        "@timestamp"
      ]
    }
  }
}

Input Parameters

Provide the name of the field from which to remove the star and the name of the search domain that contains the field. To find starred field names, use the repository() query shown in the Syntax section.

Table: RemoveStarToFieldInput Input Datatype

ParameterTypeRequiredDefaultStabilityAvailabilityDescription
fieldNameStringyes Long-Term The name of the field from which to remove the star.
searchDomainNameStringyes Long-Term The search domain where the field is located.

Returned Values

The mutation returns a non-null RemoveStarToFieldMutation object. The starredFields field contains the updated list of starred fields for the search domain after the removal. Use the returned list to confirm the operation succeeded.

Table: RemoveStarToFieldMutation Datatype

ParameterTypeRequiredDefaultStabilityAvailabilityDescription
starredFieldsStringyes Long-Term Fields which are marked with a star.