Summary

The getLogCollectorInstanceDebugLogging() GraphQL query returns the debug logging configuration for a specific enrolled Log Collector instance, identified by its enrollment ID. Use this when you need to inspect the debug logging state of an individual collector rather than the global configuration.

API Stability Short-Term

Syntax

graphql
getLogCollectorInstanceDebugLogging(
      id: String!
   ): LogCollectorDebugLogging

Provide the collector's enrollment ID as id (required). The query returns null if debug logging is not configured for that instance. See Returned Values for available fields.

Example

Raw
graphql
query {
  getLogCollectorInstanceDebugLogging(id: "abc123") {
     url: "https://company.com",
     token: "def456", level: "low",
     repository: "humio"}
}
Mac OS or Linux (curl)
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "query {
  getLogCollectorInstanceDebugLogging(id: \"abc123\") {
     url: \"https://company.com\",
     token: \"def456\", level: \"low\",
     repository: \"humio\"}
}"
}
EOF
Mac OS or Linux (curl) One-line
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "query {
  getLogCollectorInstanceDebugLogging(id: \"abc123\") {
     url: \"https://company.com\",
     token: \"def456\", level: \"low\",
     repository: \"humio\"}
}"
}
EOF
Windows Cmd and curl
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql ^
    -H "Authorization: Bearer $TOKEN" ^
    -H "Content-Type: application/json" ^
    -d @'{"query" : "query { ^
  getLogCollectorInstanceDebugLogging(id: \"abc123\") { ^
     url: \"https://company.com\", ^
     token: \"def456\", level: \"low\", ^
     repository: \"humio\"} ^
}" ^
} '
Windows Powershell and curl
powershell
curl.exe -X POST 
    -H "Authorization: Bearer $TOKEN"
    -H "Content-Type: application/json"
    -d '{"query" : "query {
  getLogCollectorInstanceDebugLogging(id: \"abc123\") {
     url: \"https://company.com\",
     token: \"def456\", level: \"low\",
     repository: \"humio\"}
}"
}'
    "$YOUR_LOGSCALE_URL/graphql"
Perl
perl
#!/usr/bin/perl

use HTTP::Request;
use LWP;

my $TOKEN = "TOKEN";

my $uri = '$YOUR_LOGSCALE_URL/graphql';

my $query = "query {
  getLogCollectorInstanceDebugLogging(id: \"abc123\") {
     url: \"https://company.com\",
     token: \"def456\", level: \"low\",
     repository: \"humio\"}
}";
$query =~ s/\n/ /g;
my $json = sprintf('{"query" : "%s"}',$query);
my $req = HTTP::Request->new("POST", $uri );

$req->header("Authorization" => "Bearer $TOKEN");
$req->header("Content-Type" => "application/json");

$req->content( $json );

my $lwp = LWP::UserAgent->new;

my $result = $lwp->request( $req );

print $result->{"_content"},"\n";
Python
python
#! /usr/local/bin/python3

import requests

url = '$YOUR_LOGSCALE_URL/graphql'
mydata = r'''{"query" : "query {
  getLogCollectorInstanceDebugLogging(id: \"abc123\") {
     url: \"https://company.com\",
     token: \"def456\", level: \"low\",
     repository: \"humio\"}
}"
}'''

resp = requests.post(url,
                     data = mydata,
                     headers = {
   "Authorization" : "Bearer $TOKEN",
   "Content-Type" : "application/json"
}
)

print(resp.text)
Node.js
javascript
const https = require('https');

const data = JSON.stringify(
    {"query" : "query {
  getLogCollectorInstanceDebugLogging(id: \"abc123\") {
     url: \"https://company.com\",
     token: \"def456\", level: \"low\",
     repository: \"humio\"}
}"
}
);


const options = {
  hostname: '$YOUR_LOGSCALE_URL',
  path: 'graphql',
  port: 443,
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Content-Length': data.length,
    Authorization: 'BEARER ' + process.env.TOKEN,
    'User-Agent': 'Node',
  },
};

const req = https.request(options, (res) => {
  let data = '';
  console.log(`statusCode: ${res.statusCode}`);

  res.on('data', (d) => {
    data += d;
  });
  res.on('end', () => {
    console.log(JSON.parse(data).data);
  });
});

req.on('error', (error) => {
  console.error(error);
});

req.write(data);
req.end();

Returned Values

LogCollectorDebugLogging is a union type with one member: LogCollectorDebugLoggingStatic. Fields include url (nullable — the LogScale instance URL receiving forwarded debug logs), token (non-nullable — the ingest token for that instance), level (non-nullable — the log level at which logs are forwarded), and repository (nullable — the LogScale repository into which debug logs are ingested). The table below provides more details:

Table: LogCollectorDebugLoggingStatic Datatype

ParameterTypeRequiredDefaultStabilityAvailabilityDescription
Some input parameters may be required, as indicated in the Required column. For return values, this indicates that you are assured a value if the field is requested for the results. 
Table last updated: Oct 14, 2026 
levelStringyes Short-Term The debugging level to log.
repositoryString  Short-Term The repository for debugging.
tokenStringyes Short-Term The token used by the Log Collector.
urlString  Short-Term The URL for debugging the Log Collector.