API reference Using the API
Filter expressions
Lists that can be narrowed take a filter expression in f. It is the same
expression the console writes into its own address bar when you pick a facet.
Healthy machines outside the lab group
The shape
The expression is segments separated by ;.
- The first segment is the join:
all(every condition must hold) orany(at least one must). Always start with it. A first segment that is anything else reads asall, and is not used as a condition. - Every later segment is a condition:
field~operator~values, with several values separated by,.
| Operator | Means | Values |
|---|---|---|
in | The field is one of the values. | One or more |
nin | The field is none of the values. | One or more |
before | The field, a time, is earlier than the value. | One RFC 3339 time |
after | The field, a time, is later than the value. | One RFC 3339 time |
Which fields
Each list has its own fields. They are named in the description of that
operation's f parameter. A field the list does not have is a 400 that
names it.
Limits
- A value may not contain
;,~or,. A condition holding one is dropped rather than guessed at. - A malformed condition is dropped; the others still apply.
- An expression holds at most 20 conditions, and a condition at most 64 values.
Free text is not a condition. Where a list offers it, it is the q
parameter, and it applies together with the expression.