searchLogs
Query and analyze Wazuh security logs stored in OpenSearch by searching specific index patterns, filtering by time range, and retrieving relevant fields for detailed insights.
Instructions
Search for logs in any OpenSearch index
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| fields | No | Comma-separated list of fields to return | |
| index | Yes | Index pattern to search | |
| maxResults | No | Maximum number of results to return | |
| query | Yes | The search query text | |
| timeField | No | Name of the timestamp field | @timestamp |
| timeRange | No | Time range (e.g., 1h, 24h, 7d) | 24h |