The redactEvents()
For more information on creating views to redact data, see the
Creating a Repository or View documentation page. You may
also want to look at
General Settings for
related information.
Below is the syntax for the redactEvents()
redactEvents(
repositoryName : string!
) : [ DeleteEvents! ] !
For the DeleteEvents datatype, see the
Returned Datatypes section. Below is an example using this query
field:
Show:
Raw Mac OS or Linux (curl) Mac OS or Linux (curl) One-line Windows Cmd and curl Windows Powershell and curl Perl Python Node.js
Raw query {
redactEvents( repositoryName : "humio" )
{ id, created, start, end, query }
} Mac OS or Linux (curl) curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json" \
-d @- << EOF
{"query" : "query {
redactEvents(repositoryName:\"humio\")
{id, created, start, end, query}
}"
}
EOFMac OS or Linux (curl) One-line curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json" \
-d @- << EOF
{"query" : "query {
redactEvents(repositoryName:\"humio\")
{id, created, start, end, query}
}"
}
EOFWindows Cmd and curl curl -v -X POST $YOUR_LOGSCALE_URL/graphql ^
-H "Authorization: Bearer $TOKEN" ^
-H "Content-Type: application/json" ^
-d @'{"query" : "query { ^
redactEvents(repositoryName:\"humio\") ^
{id, created, start, end, query} ^
}" ^
} 'Windows Powershell and curl curl.exe -X POST
-H "Authorization: Bearer $TOKEN "
-H "Content-Type: application/json"
-d '{"query" : "query {
redactEvents(repositoryName:\"humio\")
{id, created, start, end, query}
}"
}'
"$YOUR_LOGSCALE_URL /graphql" Perl
use HTTP::Request;
use LWP;
my $INGEST_TOKEN = "TOKEN" ;
my $uri = '$YOUR_LOGSCALE_URL/graphql' ;
my $json = '{"query" : "query {
redactEvents(repositoryName:\"humio\")
{id, created, start, end, query}
}"
}' ;
my $req = HTTP::Request->new("POST" , $uri );
$req->header("Authorization" => "Bearer $TOKEN" );
$req->header("Content-Type" => "application/json" );
$req->content( $json );
my $lwp = LWP::UserAgent->new;
my $result = $lwp->request( $req );
print $result->{"_content" },"\n" ;Python
import requests
url = '$YOUR_LOGSCALE_URL/graphql'
mydata = r'''{"query" : "query {
redactEvents(repositoryName:\"humio\")
{id, created, start, end, query}
}"
}'''
resp = requests.post(url,
data = mydata,
headers = {
"Authorization" : "Bearer $TOKEN" ,
"Content-Type" : "application/json"
}
)
print (resp.text)Node.js const https = require ('https' );
const data = JSON .stringify (
{"query" : "query {
redactEvents(repositoryName:\"humio\")
{id, created, start, end, query}
}"
}
);
const options = {
hostname : '$YOUR_LOGSCALE_URL/graphql' ,
path : '/graphql' ,
port : 443 ,
method : 'POST' ,
headers : {
'Content-Type' : 'application/json' ,
'Content-Length' : data.length ,
Authorization : 'BEARER ' + process.env .TOKEN ,
'User-Agent' : 'Node' ,
},
};
const req = https.request (options, (res ) => {
let data = '' ;
console .log (`statusCode: ${res.statusCode} ` );
res.on ('data' , (d ) => {
data += d;
});
res.on ('end' , () => {
console .log (JSON .parse (data).data );
});
});
req.on ('error' , (error ) => {
console .error (error);
});
req.write (data);
req.end ();
The returned datatype DeleteEvents
Table: DeleteEvents
Parameter Type Required Default Stability Description Some arguments may be required, as indicated in the Required Table last updated: Mar 25, 2025 createddatetime yes Long-TermThe date and time, in the ISO-8601 instant format (e.g., 2022-12-03T10:15:30.00Z), the set was created. createdByUserstring Long-TermThe user that created the deletion. enddatetime yes Long-TermThe ending date and time, in the ISO-8601 instant format (e.g., 2022-12-03T10:15:30.00Z), from which to select events to delete. idstring yes Long-TermThe unique identifier for the set of events to delete. querystring yes Long-TermThe query for selected events. languageVersionLanguageVersionyes Long-TermThe language version used by LogScale. See LanguageVersion startdatetime yes Long-TermThe starting date and time, in the ISO-8601 instant format (e.g., 2022-12-03T10:15:30.00Z), from which to select events to delete.
