search_values
Retrieve distinct field values from a log stream within a time range. Specify stream, fields, start and end timestamps, and optional filter queries to narrow results.
Instructions
Get distinct field values for a stream over a time range. stream_name is the raw stream name path segment, for example my_stream; do not quote it like SQL. fields is a comma-separated field list. filter_query uses OpenObserve's _values filter syntax, e.g. kubernetes_pod_namespace=litellm. Simple SQL-like equality such as kubernetes_pod_namespace='litellm' is normalized automatically. start_time and end_time accept Unix timestamps in seconds, milliseconds, microseconds, or nanoseconds and are normalized to microseconds. In this tool, total means the number of field groups returned, not the total number of matching log records.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| stream_name | Yes | ||
| fields | Yes | ||
| start_time | Yes | ||
| end_time | Yes | ||
| size | No | ||
| offset | No | ||
| filter_query | No | ||
| keyword | No | ||
| regions | No | ||
| timeout | No | ||
| no_count | No | ||
| include_raw | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||