analyzeQuery(): Validates saved queries, checks for errors and warnings, and suggests appropriate triggers.

blockedQueries(): Gets a list of blocked query patterns.

concatenateQueries(): Merges multiple valid queries into one query.

exceededQueryQuotas(): Can determine if a user has exceeded their query quota.

queryAnalysis(): Used to analyze a query. [Preview]

queryAssistance(): Used to return query assistance for a search. [Preview]

queryQuotaDefaultSettings(): Retrieves the query quota default settings.

queryQuotaUsage(): Returns the query quota usage for a user.

queryQuotaUserSettings(): Returns the query quota settings for a user.

querySearchDomains(): Used to query search domains with an organization filter.

runningQueries(): Is used to get a list of running queries.

validateQuery(): Used to check that a query compiles.

addOrUpdateQueryQuotaDefaultSettings(): Changes or adds default query quota settings.

addOrUpdateQueryQuotaUserSettings(): Changes or adds user query quota settings.

addRecentQuery(): Can add a query to the list of recent queries.

addSavedQueryLabels(): Attach labels to a saved query.

addToBlocklist(): Blocklist a query based on a value or pattern.

addToBlocklistById(): Include a specific query to a blocklist.

batchUpdateQueryOwnership(): Batch update query ownership to run them for triggers and shared dashboards.

clearRecentQueries(): Can clear recent queries for the current user, for a search domain.

copySavedQuery(): Copies a saved query to create a new one. [Preview]

createSavedQuery(): Used to make a saved query.

createSavedQueryFromPackageTemplate(): Generates a saved query from a package template.

createSavedQueryFromTemplate(): Generates a saved query from a YAML template. [Preview]

deleteSavedQueryV2(): Is used to delete a saved query in LogScale.

fleetManagementSetUseLegacyQueries(): Allows use of legacy queries — or disallows them.

killQuery(): Terminates a running query in LogScale.

removeFromBlocklist(): Used to remove an item from a query blocklist.

removeQueryQuotaDefaultSettings(): Used to remove the query quota default settings.

removeQueryQuotaUserSettings(): Removes query quota settings for a user.

removeSavedQueryLabels(): Will remove labels from a saved query,

setDefaultSavedQuery(): Picks the query to load when opening the search page in a view.

starQuery(): Add a star by a saved query in the UI.

stopAllQueries(): Stops all running queries, includes streaming ones.

stopHistoricalQueries(): Stops all historical queries.

stopStreamingQueries(): Stops all streaming queries in LogScale.

unstarQuery(): Removes a star from a saved query in the UI.

updateDefaultQueryPrefix(): Changes the default query prefix for a group in LogScale.

updateQueryPrefix(): Sets a query prefix for a group in a view in LogScale.

updateSavedQuery(): Will change a saved query in LogScale.

updateSavedQueryFromTemplate(): Will update a saved query from a YAML template. [Preview]