thruk_recent_events
Retrieve recent monitoring events from Thruk within a customizable time window, with optional filters for hosts, services, or message patterns.
Instructions
Return the most recent monitoring events from the last N hours (default 1 h).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| hours | No | ||
| limit | No | ||
| filter | No | Structured filter tree supporting AND/OR nesting. Two node types: leaf: {"type":"leaf", "field":"...", "op":"...", "value":...} group: {"type":"group", "operator":"and"|"or", "conditions":[...]} Available fields: custom_var, host, hostgroup, message, service, since, until Operators: eq, gte, in, lte, neq, regex The 'since'/'until' fields accept Thruk relative time ("-2h", "-7d") or ISO datetime ("2026-05-21 14:00:00"). Examples: # Log entries matching a pattern since -2h: {"type":"group","operator":"and","conditions":[ {"type":"leaf","field":"message","op":"regex","value":"DISK.*CRITICAL"}, {"type":"leaf","field":"since","op":"gte","value":"-2h"} ]} | |
| offset | No | ||
| columns | No | Comma-separated columns to return. Omit for a curated default set tuned for this tool; pass '' (empty string) to return all available columns. | |
| backends | No | Comma-separated backend names (sites). Omit for all backends. | |
| only_alerts | No |