admin-valentin/arcade-mcp
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
arcade-mcp/toolkits/datadog_api/arcade_datadog_api/wrapper_tools/SearchAuditLogs.json
jottakka f05560bbf4
[MOAR][DATADOG] Adding DataDog starter toolkit (+590) (#633) 
Co-authored-by: Francisco Liberal <francisco@arcade.dev>
2025-10-20 15:49:48 -03:00

363 lines
15 KiB
JSON
Raw Blame History

{
"name": "SearchAuditLogs",
"fully_qualified_name": "DatadogApi.SearchAuditLogs@0.1.0",
"description": "Retrieve audit logs events based on a search query.\n\nUse this tool to filter and search through Datadog audit logs events using complex queries. Results are paginated.",
"toolkit": {
"name": "ArcadeDatadogApi",
"description": null,
"version": "0.1.0"
},
"input": {
"parameters": [
{
"name": "minimum_time",
"required": false,
"description": "Minimum time for the requested events. Accepts date, math, or timestamps in milliseconds.",
"value_schema": {
"val_type": "string",
"inner_val_type": null,
"enum": null,
"properties": null,
"inner_properties": null,
"description": "Minimum time for the requested events. Supports date, math, and regular timestamps (in milliseconds)."
},
"inferrable": true,
"http_endpoint_parameter_name": "filter.from"
},
{
"name": "audit_logs_search_query",
"required": false,
"description": "A string representing the search query following the Audit Logs search syntax to filter the logs.",
"value_schema": {
"val_type": "string",
"inner_val_type": null,
"enum": null,
"properties": null,
"inner_properties": null,
"description": "Search query following the Audit Logs search syntax."
},
"inferrable": true,
"http_endpoint_parameter_name": "filter.query"
},
{
"name": "maximum_time_for_requested_events",
"required": false,
"description": "Maximum time for the requested events. Supports date, math, and regular timestamps (in milliseconds).",
"value_schema": {
"val_type": "string",
"inner_val_type": null,
"enum": null,
"properties": null,
"inner_properties": null,
"description": "Maximum time for the requested events. Supports date, math, and regular timestamps (in milliseconds)."
},
"inferrable": true,
"http_endpoint_parameter_name": "filter.to"
},
{
"name": "time_offset_seconds",
"required": false,
"description": "Time offset in seconds to apply to the query, adjusting the timeframe of the log search.",
"value_schema": {
"val_type": "integer",
"inner_val_type": null,
"enum": null,
"properties": null,
"inner_properties": null,
"description": "Time offset (in seconds) to apply to the query."
},
"inferrable": true,
"http_endpoint_parameter_name": "options.time_offset"
},
{
"name": "timezone",
"required": false,
"description": "Specify the timezone for the query, using GMT, UTC, an offset like UTC+1, or a Timezone Database identifier like America/New_York.",
"value_schema": {
"val_type": "string",
"inner_val_type": null,
"enum": null,
"properties": null,
"inner_properties": null,
"description": "The timezone can be specified as GMT, UTC, an offset from UTC (like UTC+1), or as a Timezone Database identifier (like America/New_York)."
},
"inferrable": true,
"http_endpoint_parameter_name": "options.timezone"
},
{
"name": "pagination_cursor",
"required": false,
"description": "Cursor for retrieving subsequent pages of audit log results.",
"value_schema": {
"val_type": "string",
"inner_val_type": null,
"enum": null,
"properties": null,
"inner_properties": null,
"description": "List following results with a cursor provided in the previous query."
},
"inferrable": true,
"http_endpoint_parameter_name": "page.cursor"
},
{
"name": "max_events_limit",
"required": false,
"description": "Specify the maximum number of events to include in the response, enabling efficient pagination.",
"value_schema": {
"val_type": "integer",
"inner_val_type": null,
"enum": null,
"properties": null,
"inner_properties": null,
"description": "Maximum number of events in the response."
},
"inferrable": true,
"http_endpoint_parameter_name": "page.limit"
},
{
"name": "sort_parameter",
"required": false,
"description": "Sort events by timestamp. Use 'timestamp' for ascending, '-timestamp' for descending.",
"value_schema": {
"val_type": "string",
"inner_val_type": null,
"enum": [
"timestamp",
"-timestamp"
],
"properties": null,
"inner_properties": null,
"description": "Sort parameters when querying events."
},
"inferrable": true,
"http_endpoint_parameter_name": "sort"
}
]
},
"output": {
"description": "Response from the API endpoint 'SearchAuditLogs'.",
"available_modes": [
"value",
"error",
"null"
],
"value_schema": {
"val_type": "json",
"inner_val_type": null,
"enum": null,
"properties": null,
"inner_properties": null,
"description": null
}
},
"requirements": {
"authorization": null,
"secrets": [
{
"key": "DATADOG_API_KEY"
},
{
"key": "DATADOG_APPLICATION_KEY"
},
{
"key": "DATADOG_BASE_URL"
}
],
"metadata": null
},
"deprecation_message": null,
"metadata": {
"object_type": "api_wrapper_tool",
"version": "1.1.0",
"description": "Tools that enable LLMs to interact directly with the Datadog API."
},
"http_endpoint": {
"metadata": {
"object_type": "http_endpoint",
"version": "1.2.0",
"description": ""
},
"url": "https://{datadog_base_url}/api/v2/audit/events/search",
"http_method": "POST",
"headers": {},
"parameters": [
{
"name": "filter.from",
"tool_parameter_name": "minimum_time",
"description": "Minimum time for the requested events. Supports date, math, and regular timestamps (in milliseconds).",
"value_schema": {
"val_type": "string",
"inner_val_type": null,
"enum": null,
"properties": null,
"inner_properties": null,
"description": "Minimum time for the requested events. Supports date, math, and regular timestamps (in milliseconds)."
},
"accepted_as": "body",
"required": false,
"deprecated": false,
"default": "now-15m",
"documentation_urls": []
},
{
"name": "filter.query",
"tool_parameter_name": "audit_logs_search_query",
"description": "Search query following the Audit Logs search syntax.",
"value_schema": {
"val_type": "string",
"inner_val_type": null,
"enum": null,
"properties": null,
"inner_properties": null,
"description": "Search query following the Audit Logs search syntax."
},
"accepted_as": "body",
"required": false,
"deprecated": false,
"default": "*",
"documentation_urls": []
},
{
"name": "filter.to",
"tool_parameter_name": "maximum_time_for_requested_events",
"description": "Maximum time for the requested events. Supports date, math, and regular timestamps (in milliseconds).",
"value_schema": {
"val_type": "string",
"inner_val_type": null,
"enum": null,
"properties": null,
"inner_properties": null,
"description": "Maximum time for the requested events. Supports date, math, and regular timestamps (in milliseconds)."
},
"accepted_as": "body",
"required": false,
"deprecated": false,
"default": "now",
"documentation_urls": []
},
{
"name": "options.time_offset",
"tool_parameter_name": "time_offset_seconds",
"description": "Time offset (in seconds) to apply to the query.",
"value_schema": {
"val_type": "integer",
"inner_val_type": null,
"enum": null,
"properties": null,
"inner_properties": null,
"description": "Time offset (in seconds) to apply to the query."
},
"accepted_as": "body",
"required": false,
"deprecated": false,
"default": null,
"documentation_urls": []
},
{
"name": "options.timezone",
"tool_parameter_name": "timezone",
"description": "The timezone can be specified as GMT, UTC, an offset from UTC (like UTC+1), or as a Timezone Database identifier (like America/New_York).",
"value_schema": {
"val_type": "string",
"inner_val_type": null,
"enum": null,
"properties": null,
"inner_properties": null,
"description": "The timezone can be specified as GMT, UTC, an offset from UTC (like UTC+1), or as a Timezone Database identifier (like America/New_York)."
},
"accepted_as": "body",
"required": false,
"deprecated": false,
"default": "UTC",
"documentation_urls": []
},
{
"name": "page.cursor",
"tool_parameter_name": "pagination_cursor",
"description": "List following results with a cursor provided in the previous query.",
"value_schema": {
"val_type": "string",
"inner_val_type": null,
"enum": null,
"properties": null,
"inner_properties": null,
"description": "List following results with a cursor provided in the previous query."
},
"accepted_as": "body",
"required": false,
"deprecated": false,
"default": null,
"documentation_urls": []
},
{
"name": "page.limit",
"tool_parameter_name": "max_events_limit",
"description": "Maximum number of events in the response.",
"value_schema": {
"val_type": "integer",
"inner_val_type": null,
"enum": null,
"properties": null,
"inner_properties": null,
"description": "Maximum number of events in the response."
},
"accepted_as": "body",
"required": false,
"deprecated": false,
"default": 10,
"documentation_urls": []
},
{
"name": "sort",
"tool_parameter_name": "sort_parameter",
"description": "Sort parameters when querying events.",
"value_schema": {
"val_type": "string",
"inner_val_type": null,
"enum": [
"timestamp",
"-timestamp"
],
"properties": null,
"inner_properties": null,
"description": "Sort parameters when querying events."
},
"accepted_as": "body",
"required": false,
"deprecated": false,
"default": null,
"documentation_urls": []
}
],
"documentation_urls": [],
"secrets": [
{
"arcade_key": "DATADOG_API_KEY",
"parameter_name": "DD-API-KEY",
"accepted_as": "header",
"formatted_value": null,
"description": "",
"is_auth_token": false
},
{
"arcade_key": "DATADOG_APPLICATION_KEY",
"parameter_name": "DD-APPLICATION-KEY",
"accepted_as": "header",
"formatted_value": null,
"description": "",
"is_auth_token": false
},
{
"arcade_key": "DATADOG_BASE_URL",
"parameter_name": "datadog_base_url",
"accepted_as": "path",
"formatted_value": null,
"description": "",
"is_auth_token": false
}
],
"request_body_spec": "{\n \"content\": {\n \"application/json\": {\n \"schema\": {\n \"description\": \"The request for a Audit Logs events list.\",\n \"properties\": {\n \"filter\": {\n \"description\": \"Search and filter query settings.\",\n \"properties\": {\n \"from\": {\n \"default\": \"now-15m\",\n \"description\": \"Minimum time for the requested events. Supports date, math, and regular timestamps (in milliseconds).\",\n \"example\": \"now-15m\",\n \"type\": \"string\"\n },\n \"query\": {\n \"default\": \"*\",\n \"description\": \"Search query following the Audit Logs search syntax.\",\n \"example\": \"@type:session AND @session.type:user\",\n \"type\": \"string\"\n },\n \"to\": {\n \"default\": \"now\",\n \"description\": \"Maximum time for the requested events. Supports date, math, and regular timestamps (in milliseconds).\",\n \"example\": \"now\",\n \"type\": \"string\"\n }\n },\n \"type\": \"object\"\n },\n \"options\": {\n \"description\": \"Global query options that are used during the query.\\nNote: Specify either timezone or time offset, not both. Otherwise, the query fails.\",\n \"properties\": {\n \"time_offset\": {\n \"description\": \"Time offset (in seconds) to apply to the query.\",\n \"format\": \"int64\",\n \"type\": \"integer\"\n },\n \"timezone\": {\n \"default\": \"UTC\",\n \"description\": \"The timezone can be specified as GMT, UTC, an offset from UTC (like UTC+1), or as a Timezone Database identifier (like America/New_York).\",\n \"example\": \"GMT\",\n \"type\": \"string\"\n }\n },\n \"type\": \"object\"\n },\n \"page\": {\n \"description\": \"Paging attributes for listing events.\",\n \"properties\": {\n \"cursor\": {\n \"description\": \"List following results with a cursor provided in the previous query.\",\n \"example\": \"eyJzdGFydEF0IjoiQVFBQUFYS2tMS3pPbm40NGV3QUFBQUJCV0V0clRFdDZVbG8zY3pCRmNsbHJiVmxDWlEifQ==\",\n \"type\": \"string\"\n },\n \"limit\": {\n \"default\": 10,\n \"description\": \"Maximum number of events in the response.\",\n \"example\": 25,\n \"format\": \"int32\",\n \"maximum\": 1000,\n \"type\": \"integer\"\n }\n },\n \"type\": \"object\"\n },\n \"sort\": {\n \"description\": \"Sort parameters when querying events.\",\n \"enum\": [\n \"timestamp\",\n \"-timestamp\"\n ],\n \"type\": \"string\",\n \"x-enum-varnames\": [\n \"TIMESTAMP_ASCENDING\",\n \"TIMESTAMP_DESCENDING\"\n ]\n }\n },\n \"type\": \"object\"\n }\n }\n },\n \"required\": false\n}",
"use_request_body_schema_mode": false,
"validate_request_body_schema": false
}
}
Reference in a new issue View git blame Copy permalink