Summary

The meta() GraphQL query will return information about the LogScale instance.

API Stability Short-Term

Syntax

graphql
meta(
     url: string
   ): HumioMetadata!

This query field has one input, the URL of the LogScale instance. For the results, you can get the meta data for the instance (e.g., authentication method used, ingest feed configurations),

Example

Raw
graphql
query {
  meta(url: "https://logger.company.com") 
     {version, organizationMode,
      authenticationMethod{ name }, 
      sharedDashboardsEnabled, 
      environment,  isExternalManaged }
}
Mac OS or Linux (curl)
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "query {
  meta(url: \"https://logger.company.com\") 
     {version, organizationMode,
      authenticationMethod{ name }, 
      sharedDashboardsEnabled, 
      environment,  isExternalManaged }
}"
}
EOF
Mac OS or Linux (curl) One-line
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "query {
  meta(url: \"https://logger.company.com\") 
     {version, organizationMode,
      authenticationMethod{ name }, 
      sharedDashboardsEnabled, 
      environment,  isExternalManaged }
}"
}
EOF
Windows Cmd and curl
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql ^
    -H "Authorization: Bearer $TOKEN" ^
    -H "Content-Type: application/json" ^
    -d @'{"query" : "query { ^
  meta(url: \"https://logger.company.com\")  ^
     {version, organizationMode, ^
      authenticationMethod{ name },  ^
      sharedDashboardsEnabled,  ^
      environment,  isExternalManaged } ^
}" ^
} '
Windows Powershell and curl
powershell
curl.exe -X POST 
    -H "Authorization: Bearer $TOKEN"
    -H "Content-Type: application/json"
    -d '{"query" : "query {
  meta(url: \"https://logger.company.com\") 
     {version, organizationMode,
      authenticationMethod{ name }, 
      sharedDashboardsEnabled, 
      environment,  isExternalManaged }
}"
}'
    "$YOUR_LOGSCALE_URL/graphql"
Perl
perl
#!/usr/bin/perl

use HTTP::Request;
use LWP;

my $TOKEN = "TOKEN";

my $uri = '$YOUR_LOGSCALE_URL/graphql';

my $query = "query {
  meta(url: \"https://logger.company.com\") 
     {version, organizationMode,
      authenticationMethod{ name }, 
      sharedDashboardsEnabled, 
      environment,  isExternalManaged }
}";
$query =~ s/\n/ /g;
my $json = sprintf('{"query" : "%s"}',$query);
my $req = HTTP::Request->new("POST", $uri );

$req->header("Authorization" => "Bearer $TOKEN");
$req->header("Content-Type" => "application/json");

$req->content( $json );

my $lwp = LWP::UserAgent->new;

my $result = $lwp->request( $req );

print $result->{"_content"},"\n";
Python
python
#! /usr/local/bin/python3

import requests

url = '$YOUR_LOGSCALE_URL/graphql'
mydata = r'''{"query" : "query {
  meta(url: \"https://logger.company.com\") 
     {version, organizationMode,
      authenticationMethod{ name }, 
      sharedDashboardsEnabled, 
      environment,  isExternalManaged }
}"
}'''

resp = requests.post(url,
                     data = mydata,
                     headers = {
   "Authorization" : "Bearer $TOKEN",
   "Content-Type" : "application/json"
}
)

print(resp.text)
Node.js
javascript
const https = require('https');

const data = JSON.stringify(
    {"query" : "query {
  meta(url: \"https://logger.company.com\") 
     {version, organizationMode,
      authenticationMethod{ name }, 
      sharedDashboardsEnabled, 
      environment,  isExternalManaged }
}"
}
);


const options = {
  hostname: '$YOUR_LOGSCALE_URL',
  path: 'graphql',
  port: 443,
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Content-Length': data.length,
    Authorization: 'BEARER ' + process.env.TOKEN,
    'User-Agent': 'Node',
  },
};

const req = https.request(options, (res) => {
  let data = '';
  console.log(`statusCode: ${res.statusCode}`);

  res.on('data', (d) => {
    data += d;
  });
  res.on('end', () => {
    console.log(JSON.parse(data).data);
  });
});

req.on('error', (error) => {
  console.error(error);
});

req.write(data);
req.end();
Example Responses
Success (HTTP Response Code 200 OK)
json
{
  "data": {
    "meta": {
      "authenticationMethod": {
        "name": "SAMLAuthentication"
      },
      "sharedDashboardsEnabled": true,
      "organizationMode": "Single",
      "version": "1.161.0--build-2112--sha-ea4237e6b99165389c673adff40050178f1a697e",
      "isExternalManaged": false,
      "environment": "ON_PREM"
    }
  }
}

Returned Values

For the results, you can get the meta data for the instance, such as the authentication method used, whether SMTP is used, ingest feed configurations, AWS settings, etc. Below is a list of choices, along with a description of each:

Table: HumioMetadata Datatype

ParameterTypeRequiredDefaultStabilityDescription
Some input parameters may be required, as indicated in the Required column. For return values, this indicates that you are assured a value if the field is requested for the results.
Table last updated: Oct 29, 2025
allowActionsNotUseProxybooleanyes Long-TermWhether to allow actions not using proxy (i.e., value of HTTP_PROXY_ALLOW_ACTIONS_NOT_USE).
authenticationMethodAuthenticationMethodyes Long-TermThe authentication method used for the cluster node. See AuthenticationMethod.
awsIngestFeedsConfigurationStatusIngestFeedConfigurationStatusyes Long-TermThe configuration status for AWS ingest feeds. This is a preview, an experimental feature. It's not ready for production. See IngestFeedConfigurationStatus.
awsRegions[string]yes Long-TermA list of supported AWS regions. This is a preview, an experimental feature. It's not ready for production.
clusterIdstringyes Long-TermThe unique identifier of the cluster.
deleteBackupAfterlongyes Long-TermThe time in ms after which a repository has been marked for deletion it will no longer be restorable.
environmentEnvironmentTypeyes Long-TermThe type of environment on which LogScale is running. See EnvironmentType .
eulaUrlstringyes Short-TermThe URL for where the End-User License Agreement can be found.
externalGroupSynchronizationbooleanyes Short-TermWhether external group synchronization is enabled.
externalPermissionsbooleanyes Long-TermWhether there are external permissions.
falconDataConnectorUrlstring  Short-TermThe URL of the Falcon data connector.
globalAllowListEmailActionsEnabledbooleanyes Long-TermWhether the global allow list email actions are enabled.
ingestFeedAwsRoleArnstring  Long-TermCluster AWS IAM role arn (i.e., Amazon Resource Name) used to assume role for ingest feeds. This is a preview, an experimental feature. It's not ready for production.
isApiExplorerEnabledbooleanyes Short-TermWhether the API Explorer is enabled.
isAutomaticUpdateCheckingEnabledbooleanyes Long-TermWhether automatic update checking enabled.
isClusterBeingUpdatedbooleanyes PreviewWhether the cluster is being updated, based on differences in the cluster node versions. This is a preview, an experimental field used to improve the user experience during cluster upgrades.
isExternalManagedbooleanyes Short-TermWhether the account is externally managed.
isFeatureFlagEnabled(feature: FeatureFlag): booleanmultipleyes Short-TermReturns enabled features that are likely in beta. See FeatureFlag .
isPendingUsersEnabledbooleanyes Short-TermWhether allowing pending users is enabled.
isScheduledReportEnabledbooleanyes Short-TermWhether the scheduled report is enabled.
isUsingSmtpbooleanyes Long-TermWhether LogScale is using SMTP.
maxCsvFileUploadSizeByteslongyes Short-TermThe maximum CSV (i.e., comma-separated values) file upload size in bytes.
maxJsonFileUploadSizeByteslongyes Short-TermThe maximum JSON (i.e., JavaScript Object Notation) file upload size in bytes.
minimumNodeVersionstringyes PreviewThe lowest detected node version in the cluster. This is a preview, an experimental field used to improve the user experience during cluster upgrades.
organizationModeOrganizationModeyes Short-TermWhether the organization mode used. See OrganizationMode .
organizationMultiModebooleanyes Short-TermWhether the organization is using multi-mode.
personalUserTokensEnabledbooleanyes Short-TermWhether the personal user tokens are enabled.
regions[RegionSelectData]yes Long-TermThe name and URL for the regions. See RegionSelectData.
sandboxesEnabledbooleanyes Short-TermWhether sandbox repositories are enabled.
scheduledSearchMaxBackfillLimitinteger  Long-TermThe scheduled search maximum backfill limit (i.e., value of SCHEDULED_SEARCH_BACKFILL_LIMIT).
sharedDashboardsEnabledbooleanyes Short-TermWhether the shared dashboards are enabled.
versionstringyes Long-TermThe version of Falcon LogScale.