Queries that return data in the Sumo dashboard return empty array when invoked from the API

Comments

2 comments

  • Avatar
    Rick Jury

    Hi Hardeep,

    it's very hard to say what is happening here without access to your logs and account - for example you can get behaviour like this if you have RBAC roles and the key you are using has different access to the user.

    I'd suggest you log a support ticket https://support.sumologic.com/hc/en-us/requests/new - unless you are able to post more of the actual event data and other information here.

    0
    Comment actions Permalink
  • Avatar
    Hardeep Singh

    Hi Rick

    Thanks for your response. I found out the reason for the discrepancy. The time interval in the dashboard was 7 days while the time interval in the query was 1 day. Once I changed the timestamps I got the results back   

    0
    Comment actions Permalink

Please sign in to leave a comment.